jurjen.ladenius/Cloud-20Engineering
1
0
Fork 0
mirror of https://dev.azure.com/effectory/Survey%20Software/_git/Cloud%20Engineering synced 2026-02-27 18:52:18 +01:00
Code Issues Packages Projects Releases Wiki Activity

- web app settings (ftps/php)

Browse Source 
-Policies
This commit is contained in:
Jurjen Ladenius
2022-08-11 11:14:28 +02:00
parent 7238a5c4f3
commit f5f8333dce
13 changed files with 93861 additions and 549 deletions
Download Patch File Download Diff File Expand all files Collapse all files

51
Policies/Storage accounts should only accept TLS 1.2 or higher.json Normal file
View File

@@ -0,0 +1,51 @@
{
"mode": "All",
"policyRule": {
"if": {
"anyOf": [
{
"allOf": [
{
"field": "type",
"equals": "Microsoft.Storage/storageAccounts"
},
{
"field": "Microsoft.Storage/storageAccounts/minimumTlsVersion",
"notEquals": "TLS1_2"
}
]
},
{
"allOf": [
{
"field": "type",
"equals": "Microsoft.Storage/storageAccounts"
},
{
"field": "Microsoft.Storage/storageAccounts/supportsHttpsTrafficOnly",
"notEquals": "true"
}
]
}
]
},
"then": {
"effect": "[parameters('effect')]"
}
},
"parameters": {
"effect": {
"type": "String",
"metadata": {
"displayName": "Effect",
"description": "Enable or disable the execution of the policy"
},
"allowedValues": [
"Audit",
"deny",
"Disabled"
],
"defaultValue": "Audit"
}
}
}

115
Policies/Web Applications should only accept TLS 1.2 or higher (v4).json Normal file
View File

@@ -0,0 +1,115 @@
{
"mode": "All",
"policyRule": {
"if": {
"anyOf": [
{
"allOf": [
{
"field": "type",
"equals": "Microsoft.Web/sites"
},
{
"field": "Microsoft.Web/sites/httpsOnly",
"notEquals": "true"
}
]
},
{
"allOf": [
{
"field": "type",
"equals": "Microsoft.Web/sites/slots"
},
{
"field": "Microsoft.Web/sites/slots/httpsOnly",
"notEquals": "true"
}
]
},
{
"allOf": [
{
"field": "type",
"equals": "Microsoft.Web/sites/config"
},
{
"field": "name",
"notLike": "connectionstrings"
},
{
"field": "name",
"notLike": "backup"
},
{
"field": "name",
"notLike": "authsettingsV2"
},
{
"field": "name",
"notLike": "authsettings"
},
{
"field": "name",
"notLike": "appsettings"
},
{
"field": "Microsoft.Web/sites/config/minTlsVersion",
"notEquals": "1.2"
}
]
},
{
"allOf": [
{
"field": "type",
"equals": "Microsoft.Web/sites/slots/config"
},
{
"field": "name",
"notLike": "connectionstrings"
},
{
"field": "name",
"notLike": "backup"
},
{
"field": "name",
"notLike": "authsettingsV2"
},
{
"field": "name",
"notLike": "authsettings"
},
{
"field": "name",
"notLike": "appsettings"
},
{
"field": "Microsoft.Web/sites/slots/config/minTlsVersion",
"notEquals": "1.2"
}
]
}
]
},
"then": {
"effect": "[parameters('effect')]"
}
},
"parameters": {
"effect": {
"type": "String",
"metadata": {
"displayName": "Effect",
"description": "Enable or disable the execution of the policy"
},
"allowedValues": [
"Audit",
"deny",
"Disabled"
],
"defaultValue": "Audit"
}
}
}