Files
Cloud-20Engineering/Policies/Storage accounts should only accept TLS 1.2 or higher.json
Jurjen Ladenius f5f8333dce - web app settings (ftps/php)
-Policies
2022-08-11 11:14:28 +02:00

51 lines
1.2 KiB
JSON

{
"mode": "All",
"policyRule": {
"if": {
"anyOf": [
{
"allOf": [
{
"field": "type",
"equals": "Microsoft.Storage/storageAccounts"
},
{
"field": "Microsoft.Storage/storageAccounts/minimumTlsVersion",
"notEquals": "TLS1_2"
}
]
},
{
"allOf": [
{
"field": "type",
"equals": "Microsoft.Storage/storageAccounts"
},
{
"field": "Microsoft.Storage/storageAccounts/supportsHttpsTrafficOnly",
"notEquals": "true"
}
]
}
]
},
"then": {
"effect": "[parameters('effect')]"
}
},
"parameters": {
"effect": {
"type": "String",
"metadata": {
"displayName": "Effect",
"description": "Enable or disable the execution of the policy"
},
"allowedValues": [
"Audit",
"deny",
"Disabled"
],
"defaultValue": "Audit"
}
}
}