Deny Azure Classic Resource Deployments using Azure Custom Policy

Опубликовано: 11 Октябрь 2024
на канале: Cloud Security Training & Consulting

240

Deny Azure Classic Resource Deployments using Azure Custom Policy

Policy Definition:

{
"mode": "All",
"policyRule": {
"if": {
"allOf": [
{
"field": "type",
"contains": "Microsoft.Classic"
}
]
},
"then": {
"effect": "[parameters('effect')]"
}
},
"parameters": {
"effect": {
"type": "String",
"metadata": {
"displayName": "Effect",
"description": "Enable or disable the execution of the policy"
},
"allowedValues": [
"Audit",
"Deny",
"Disabled"
],
"defaultValue": "Audit"
}
}
}

Affected resources:
az provider list -o table | grep -i classic
Microsoft.ClassicNetwork RegistrationRequired Registered
Microsoft.ClassicCompute RegistrationRequired NotRegistered
Microsoft.ClassicInfrastructureMigrate RegistrationRequired NotRegistered
Microsoft.ClassicStorage RegistrationRequired NotRegistered
Microsoft.ClassicSubscription RegistrationFree Registered