-
Notifications
You must be signed in to change notification settings - Fork 1.1k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Built-in Policy Release 433ccfba (#1341)
Co-authored-by: Azure Policy Bot <azgovpolicy@microsoft.com>
- Loading branch information
1 parent
424da61
commit 5158357
Showing
5 changed files
with
158 additions
and
6 deletions.
There are no files selected for viewing
50 changes: 50 additions & 0 deletions
50
built-in-policies/policyDefinitions/Managed Grafana/AMG_EmailSettings_Deny.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,50 @@ | ||
| { | ||
| "properties": { | ||
| "displayName": "Azure Managed Grafana workspaces should disable email settings", | ||
| "policyType": "BuiltIn", | ||
| "mode": "Indexed", | ||
| "description": "Disables SMTP settings configuration of email contact point for alerting in Grafana workspace.", | ||
| "metadata": { | ||
| "version": "1.0.0", | ||
| "category": "Managed Grafana" | ||
| }, | ||
| "version": "1.0.0", | ||
| "parameters": { | ||
| "effect": { | ||
| "type": "String", | ||
| "metadata": { | ||
| "displayName": "Effect", | ||
| "description": "Enable or disable the execution of the policy" | ||
| }, | ||
| "allowedValues": [ | ||
| "Audit", | ||
| "Deny", | ||
| "Disabled" | ||
| ], | ||
| "defaultValue": "Audit" | ||
| } | ||
| }, | ||
| "policyRule": { | ||
| "if": { | ||
| "allOf": [ | ||
| { | ||
| "field": "type", | ||
| "equals": "Microsoft.Dashboard/grafana" | ||
| }, | ||
| { | ||
| "field": "Microsoft.Dashboard/grafana/grafanaConfigurations.smtp.enabled", | ||
| "equals": "true" | ||
| } | ||
| ] | ||
| }, | ||
| "then": { | ||
| "effect": "[parameters('effect')]" | ||
| } | ||
| }, | ||
| "versions": [ | ||
| "1.0.0" | ||
| ] | ||
| }, | ||
| "id": "/providers/Microsoft.Authorization/policyDefinitions/b6752a42-6fc3-46cb-8a15-33aa109407b1", | ||
| "name": "b6752a42-6fc3-46cb-8a15-33aa109407b1" | ||
| } |
50 changes: 50 additions & 0 deletions
50
built-in-policies/policyDefinitions/Managed Grafana/AMG_Enterprise_Deny.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,50 @@ | ||
| { | ||
| "properties": { | ||
| "displayName": "Azure Managed Grafana workspaces should disable Grafana Enterprise upgrade", | ||
| "policyType": "BuiltIn", | ||
| "mode": "Indexed", | ||
| "description": "Disables Grafana Enterprise upgrade in Grafana workspace.", | ||
| "metadata": { | ||
| "version": "1.0.0", | ||
| "category": "Managed Grafana" | ||
| }, | ||
| "version": "1.0.0", | ||
| "parameters": { | ||
| "effect": { | ||
| "type": "String", | ||
| "metadata": { | ||
| "displayName": "Effect", | ||
| "description": "Enable or disable the execution of the policy" | ||
| }, | ||
| "allowedValues": [ | ||
| "Audit", | ||
| "Deny", | ||
| "Disabled" | ||
| ], | ||
| "defaultValue": "Audit" | ||
| } | ||
| }, | ||
| "policyRule": { | ||
| "if": { | ||
| "allOf": [ | ||
| { | ||
| "field": "type", | ||
| "equals": "Microsoft.Dashboard/grafana" | ||
| }, | ||
| { | ||
| "field": "Microsoft.Dashboard/grafana/enterpriseConfigurations", | ||
| "notEquals": "null" | ||
| } | ||
| ] | ||
| }, | ||
| "then": { | ||
| "effect": "[parameters('effect')]" | ||
| } | ||
| }, | ||
| "versions": [ | ||
| "1.0.0" | ||
| ] | ||
| }, | ||
| "id": "/providers/Microsoft.Authorization/policyDefinitions/a08f2347-fe9c-482b-a944-f6a0e05124c0", | ||
| "name": "a08f2347-fe9c-482b-a944-f6a0e05124c0" | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
50 changes: 50 additions & 0 deletions
50
built-in-policies/policyDefinitions/Managed Grafana/AMG_ServiceAccount_Deny.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,50 @@ | ||
| { | ||
| "properties": { | ||
| "displayName": "Azure Managed Grafana workspaces should disable service account", | ||
| "policyType": "BuiltIn", | ||
| "mode": "Indexed", | ||
| "description": "Disables API keys and service account for automated workloads in Grafana workspace.", | ||
| "metadata": { | ||
| "version": "1.0.0", | ||
| "category": "Managed Grafana" | ||
| }, | ||
| "version": "1.0.0", | ||
| "parameters": { | ||
| "effect": { | ||
| "type": "String", | ||
| "metadata": { | ||
| "displayName": "Effect", | ||
| "description": "Enable or disable the execution of the policy" | ||
| }, | ||
| "allowedValues": [ | ||
| "Audit", | ||
| "Deny", | ||
| "Disabled" | ||
| ], | ||
| "defaultValue": "Audit" | ||
| } | ||
| }, | ||
| "policyRule": { | ||
| "if": { | ||
| "allOf": [ | ||
| { | ||
| "field": "type", | ||
| "equals": "Microsoft.Dashboard/grafana" | ||
| }, | ||
| { | ||
| "field": "Microsoft.Dashboard/grafana/apiKey", | ||
| "notEquals": "Disabled" | ||
| } | ||
| ] | ||
| }, | ||
| "then": { | ||
| "effect": "[parameters('effect')]" | ||
| } | ||
| }, | ||
| "versions": [ | ||
| "1.0.0" | ||
| ] | ||
| }, | ||
| "id": "/providers/Microsoft.Authorization/policyDefinitions/0656cf40-485c-427b-b992-703a4ecf4f88", | ||
| "name": "0656cf40-485c-427b-b992-703a4ecf4f88" | ||
| } |