last sync: 2024-Nov-25 18:54:24 UTC

[Preview]: Firewalls should be Zone Resilient

Azure BuiltIn Policy definition

Source Azure Portal
Display name [Preview]: Firewalls should be Zone Resilient
Id 18314dc7-a25d-420c-a069-f094b25ff91b
Version 1.0.0-preview
Details on versioning
Versioning Versions supported for Versioning: 1
1.0.0-preview
Built-in Versioning [Preview]
Category Resilience
Microsoft Learn
Description Firewalls can be configured to be either Zone Aligned, Zone Redundant, or neither. Firewalls that have exactly one entry in its zones array are considered Zone Aligned. In contrast, Firewalls with 3 or more entries in its zones array are recognized as Zone Redundant. This policy helps identify and enforce these resilience configurations.
Mode Indexed
Type BuiltIn
Preview True
Deprecated False
Effect Default
Audit
Allowed
Audit, Deny, Disabled
RBAC role(s) none
Rule aliases IF (1)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Network/azureFirewalls/zones[*] Microsoft.Network azureFirewalls zones[*] True False
Rule resource types IF (1)
Microsoft.Network/azureFirewalls
Compliance Not a Compliance control
Initiatives usage
Initiative DisplayName Initiative Id Initiative Category State Type
[Preview]: Resources should be Zone Resilient 130fb88f-0fc9-4678-bfe1-31022d71c7d5 Resilience Preview BuiltIn
History
Date/Time (UTC ymd) (i) Change type Change detail
2024-02-20 22:44:08 add 18314dc7-a25d-420c-a069-f094b25ff91b
JSON compare n/a
JSON
api-version=2021-06-01
EPAC