AzurePolicy

Description

This repository contains custom Azure Policy definitions that can be used to enforce specific governance and compliance requirements within your Azure environment.

Usage

To use these custom definitions, follow these steps:

1. Clone this repository to your local machine.
2. Import the desired policy definition(s) into your Azure Policy environment.
3. Assign the imported policy definition(s) to the desired Azure resource(s) or resource group(s).
4. Monitor the compliance status of your resources using the Azure Policy compliance dashboard.

For more information on Azure Policy and how to use custom definitions, refer to the official Azure documentation.

Policy Definitions

Name	Category	Policy ID
App Services - Network Restrictions - Allow Specific Addresses - Audit	App Services	259ac8b5-7446-4f79-91e7-540604ebd9c6
App Services - Network Restrictions - Allow Specific Addresses - Deny	App Services	baeedaa8-3af9-41da-bb08-f9737c5039b6
App Services Slots - Network Restrictions - Allow Specific Addresses - Audit	App Services	ad72c3b7-8b3d-4e1e-b359-32aae82e2833
App Services Slots - Network Restrictions - Allow Specific Addresses - Deny	App Services	381be48d-97ab-4f8a-85dd-dc3af0274782
Enforce Defender for Containers Plan	Security	d9c6b542-5d2e-43aa-91a0-50da7828a622
Enforce Defender for Containers Settings	Security	8feab6b0-7620-4dca-b8ee-3a7660b5062e
SQL Servers - Vulnerability Scanning (Classic) - Bring Your Own Storage	SQL	5cea7083-d842-4297-94fb-17fb10939d23
SQL Servers - Vulnerability Scanning (Expess) - Storageless	SQL	4196e00c-b0a8-42b4-8f43-024f3ac5ae98
Assign User-Assigned Managed Identity to Virtual Machines (At Scale) - Bring Your Own Identity	Compute	d367bd60-64ca-4364-98ea-276775bddd94
Configure Linux Azure VMs to run Azure Monitor Agent with BYO UAMI	Monitoring	ae8a10e6-19d6-44a3-a02d-a2bdfc707742
Configure Windows Azure VMs to run Azure Monitor Agent with BYO UAMI	Monitoring	637125fd-7c39-4b94-bb0a-d331faf333a9
Associate Linux Machines with a Data Collection Rule (With Tag Filtering)	Monitoring	2ea82cdd-f2e8-4500-af75-67a2e084ca74
Associate Windows Machines with a Data Collection Rule (With Tag Filtering)	Monitoring	eab1f514-22e3-42e3-9a1f-e1dc9199355c