AzPolicyFactory/policyAssignments/dev/pa-d-pedns.json at main · Azure/AzPolicyFactory · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
{
  "$schema": "../policyAssignment.schema.json",
  "policyAssignment": {
    "name": "pa-d-pedns",
    "displayName": "Creates DNS records for Private Endpoints Dev",
    "description": "Policy Assignment for Private Endpoints DNS registration - Dev",
    "metadata": {
      "category": "Network Security"
    },
    "policyDefinitionId": "{policyLocationResourceId}/providers/Microsoft.Authorization/policySetDefinitions/polset-pedns",
    "identity": "SystemAssigned",
    "parameters": {
      "PEDNS-001_Effect": {
        "value": "DeployIfNotExists"
      },
      "PEDNS-002_Effect": {
        "value": "DeployIfNotExists"
      },
      "PEDNS-003_Effect": {
        "value": "DeployIfNotExists"
      },
      "PEDNS-004_Effect": {
        "value": "DeployIfNotExists"
      },
      "PEDNS-005_Effect": {
        "value": "DeployIfNotExists"
      },
      "PEDNS-006_Effect": {
        "value": "DeployIfNotExists"
      },
      "PEDNS-007_Effect": {
        "value": "DeployIfNotExists"
      },
      "PEDNS-008_Effect": {
        "value": "DeployIfNotExists"
      },
      "PEDNS-009_Effect": {
        "value": "DeployIfNotExists"
      },
      "PEDNS-010_Effect": {
        "value": "DeployIfNotExists"
      },
      "PEDNS-011_Effect": {
        "value": "DeployIfNotExists"
      },
      "PEDNS-012_Effect": {
        "value": "DeployIfNotExists"
      },
      "PEDNS-013_Effect": {
        "value": "DeployIfNotExists"
      },
      "PEDNS-014_Effect": {
        "value": "DeployIfNotExists"
      },
      "PEDNS-015_Effect": {
        "value": "DeployIfNotExists"
      },
      "PEDNS-016_Effect": {
        "value": "DeployIfNotExists"
      },
      "PEDNS-017_Effect": {
        "value": "DeployIfNotExists"
      },
      "PEDNS-018_Effect": {
        "value": "DeployIfNotExists"
      },
      "PEDNS-019_Effect": {
        "value": "DeployIfNotExists"
      },
      "PEDNS-020_Effect": {
        "value": "DeployIfNotExists"
      },
      "evaluationDelay": {
        "value": "AfterProvisioning"
      },
      "privateDnsZoneResourceGroup": {
        "value": "/subscriptions/3cea5943-a7f2-4991-ba22-19e240671e63/resourceGroups/rg-ae-d-net-hub"
      }
    },
    "roleDefinitionIds": [
      "/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"
    ],
    "nonComplianceMessages": [
      {
        "policyDefinitionReferenceId": "PEDNS-001",
        "message": "PolicyID: PEDNS-001 Violation in polset-pedns Initiative - 'The Private Endpoint Private DNS Zone group for Azure Backup Private Endpoint must be configured'"
      },
      {
        "policyDefinitionReferenceId": "PEDNS-002",
        "message": "PolicyID: PEDNS-002 Violation in polset-pedns Initiative - 'The Private Endpoint Private DNS Zone group for Azure Storage blob Private Endpoint must be configured'"
      },
      {
        "policyDefinitionReferenceId": "PEDNS-003",
        "message": "PolicyID: PEDNS-003 Violation in polset-pedns Initiative - 'The Private Endpoint Private DNS Zone group for Azure Storage file Private Endpoint must be configured'"
      },
      {
        "policyDefinitionReferenceId": "PEDNS-004",
        "message": "PolicyID: PEDNS-004 Violation in polset-pedns Initiative - 'The Private Endpoint Private DNS Zone group for Azure Storage dfs Private Endpoint must be configured'"
      },
      {
        "policyDefinitionReferenceId": "PEDNS-005",
        "message": "PolicyID: PEDNS-005 Violation in polset-pedns Initiative - 'The Private Endpoint Private DNS Zone group for Azure Key Vault Private Endpoint must be configured'"
      },
      {
        "policyDefinitionReferenceId": "PEDNS-006",
        "message": "PolicyID: PEDNS-006 Violation in polset-pedns Initiative - 'The Private Endpoint Private DNS Zone group for Azure App Service Private Endpoint must be configured'"
      },
      {
        "policyDefinitionReferenceId": "PEDNS-007",
        "message": "PolicyID: PEDNS-007 Violation in polset-pedns Initiative - 'The Private Endpoint Private DNS Zone group for Event Hub Namespace Private Endpoint must be configured'"
      },
      {
        "policyDefinitionReferenceId": "PEDNS-008",
        "message": "PolicyID: PEDNS-008 Violation in polset-pedns Initiative - 'The Private Endpoint Private DNS Zone group for Azure Databricks Browser Auth Private Endpoint must be configured'"
      },
      {
        "policyDefinitionReferenceId": "PEDNS-009",
        "message": "PolicyID: PEDNS-009 Violation in polset-pedns Initiative - 'The Private Endpoint Private DNS Zone group for Azure Databricks UI API Private Endpoint must be configured'"
      },
      {
        "policyDefinitionReferenceId": "PEDNS-010",
        "message": "PolicyID: PEDNS-010 Violation in polset-pedns Initiative - 'The Private Endpoint Private DNS Zone group for Azure Data Explorer Private Endpoint must be configured'"
      },
      {
        "policyDefinitionReferenceId": "PEDNS-011",
        "message": "PolicyID: PEDNS-011 Violation in polset-pedns Initiative - 'The Private Endpoint Private DNS Zone group for Azure Monitor Private Link Scope Private Endpoint must be configured'"
      },
      {
        "policyDefinitionReferenceId": "PEDNS-012",
        "message": "PolicyID: PEDNS-012 Violation in polset-pedns Initiative - 'The Private Endpoint Private DNS Zone group for Azure Container Registry Private Endpoint must be configured'"
      },
      {
        "policyDefinitionReferenceId": "PEDNS-013",
        "message": "PolicyID: PEDNS-013 Violation in polset-pedns Initiative - 'The Private Endpoint Private DNS Zone group for Health Data Services Private Endpoint must be configured'"
      },
      {
        "policyDefinitionReferenceId": "PEDNS-014",
        "message": "PolicyID: PEDNS-014 Violation in polset-pedns Initiative - 'The Private Endpoint Private DNS Zone group for Container App Managed Environment Private Endpoint must be configured'"
      },
      {
        "policyDefinitionReferenceId": "PEDNS-015",
        "message": "PolicyID: PEDNS-015 Violation in polset-pedns Initiative - 'The Private Endpoint Private DNS Zone group for App Services slots Private Endpoint must be configured'"
      },
      {
        "policyDefinitionReferenceId": "PEDNS-016",
        "message": "PolicyID: PEDNS-016 Violation in polset-pedns Initiative - 'The Private Endpoint Private DNS Zone group for Cognitive Service Accounts Private Endpoint must be configured'"
      },
      {
        "policyDefinitionReferenceId": "PEDNS-017",
        "message": "PolicyID: PEDNS-017 Violation in polset-pedns Initiative - 'The Private Endpoint Private DNS Zone group for Cosmos DB SQL Private Endpoint must be configured'"
      },
      {
        "policyDefinitionReferenceId": "PEDNS-018",
        "message": "PolicyID: PEDNS-018 Violation in polset-pedns Initiative - 'The Private Endpoint Private DNS Zone group for Azure Search Services Private Endpoint must be configured'"
      },
      {
        "policyDefinitionReferenceId": "PEDNS-019",
        "message": "PolicyID: PEDNS-019 Violation in polset-pedns Initiative - 'The Private Endpoint Private DNS Zone group for Cosmos DB SQL Private Endpoint must be configured'"
      },
      {
        "policyDefinitionReferenceId": "PEDNS-020",
        "message": "PolicyID: PEDNS-020 Violation in polset-pedns Initiative - 'The Private Endpoint Private DNS Zone group for Foundry Tools Private Endpoint must be configured'"
      }
    ]
  },
  "definitionSourceManagementGroupId": "/providers/Microsoft.Management/managementGroups/CONTOSO-DEV",
  "managementGroupId": "CONTOSO-DEV"
}