AzPolicyAdvertizer

last sync: 2024-Nov-25 18:54:24 UTC

Virtual networks should be protected by Azure DDoS Protection

Azure BuiltIn Policy definition

Source

Azure Portal

Display name

Virtual networks should be protected by Azure DDoS Protection

94de2ad3-e0c1-4caf-ad78-5d47bbc83d3d

Version

1.0.1
Details on versioning

Versioning

Versions supported for Versioning: 2
1.0.0
1.0.1
Built-in Versioning [Preview]

Category

Network
Microsoft Learn

Description

Protect your virtual networks against volumetric and protocol attacks with Azure DDoS Protection. For more information, visit https://aka.ms/ddosprotectiondocs.

Mode

Indexed

Type

BuiltIn

Preview

False

Deprecated

False

Effect

Default
Modify
Allowed
Modify, Audit, Disabled

RBAC role(s)

Role Name	Role Id
Network Contributor	4d97b98b-1d4f-4787-a291-c67834d212e7

Rule aliases

IF (2)

Alias	Namespace	ResourceType	Path	PathIsDefault	DefaultPath	Modifiable
Microsoft.Network/virtualNetworks/ddosProtectionPlan	Microsoft.Network	virtualNetworks	properties.ddosProtectionPlan	True		True
Microsoft.Network/virtualNetworks/enableDdosProtection	Microsoft.Network	virtualNetworks	properties.enableDdosProtection	True		True

THEN-Operations (2)

Alias	Namespace	ResourceType	Path	PathIsDefault	DefaultPath	Modifiable
Microsoft.Network/virtualNetworks/ddosProtectionPlan.id	Microsoft.Network	virtualNetworks	properties.ddosProtectionPlan.id	True		True
Microsoft.Network/virtualNetworks/enableDdosProtection	Microsoft.Network	virtualNetworks	properties.enableDdosProtection	True		True

Rule resource types

IF (1)
Microsoft.Network/virtualNetworks

Compliance

The following 1 compliance controls are associated with this Policy definition 'Virtual networks should be protected by Azure DDoS Protection' (94de2ad3-e0c1-4caf-ad78-5d47bbc83d3d)

Control Domain	Control	Name	MetadataId	Category	Title	Owner	Requirements	Description	Info	Policy#
	mp.s.4 Protection against denial of service	mp.s.4 Protection against denial of service	404 not found				n/a	n/a		7

Initiatives usage

Initiative DisplayName	Initiative Id	Initiative Category	State	Type
Enforce recommended guardrails for Network and Networking services	Enforce-Guardrails-Network	Network	GA	ALZ
Spain ENS	175daf90-21e1-4fec-b745-7b4c909aa94c	Regulatory Compliance	GA	BuiltIn

History

Date/Time (UTC ymd) (i)	Change type	Change detail
2024-01-12 18:35:06	change	Patch (1.0.0 > 1.0.1)
2021-03-31 14:35:06	add	94de2ad3-e0c1-4caf-ad78-5d47bbc83d3d

JSON compare

compare mode: version left: version right:

JSON

api-version=2021-06-01
EPAC