AzPolicyAdvertizer

last sync: 2024-Nov-25 18:54:24 UTC

[Preview]: Configure blob backup for all storage accounts that do not contain a given tag to a backup vault in the same region

Azure BuiltIn Policy definition

Source Azure Portal
Display name [Preview]: Configure blob backup for all storage accounts that do not contain a given tag to a backup vault in the same region
Id 958dbd4e-0e20-4385-a082-d3f20c2a6ad8
Version 2.0.0-preview
Details on versioning
Versioning Versions supported for Versioning: 1
2.0.0-preview
Built-in Versioning [Preview]
Category Backup
Microsoft Learn
Description Enforce backup for blobs on all storage accounts that do not contain a given tag to a central backup vault. Doing this can help you manage backup of blobs contained across multiple storage accounts at scale. For more details, refer to https://aka.ms/AB-BlobBackupAzPolicies
Mode Indexed
Type BuiltIn
Preview True
Deprecated False
Effect Default
DeployIfNotExists
Allowed
DeployIfNotExists, AuditIfNotExists, Disabled
RBAC role(s)
Role Name Role Id
Backup Contributor 5e467623-bb1f-42f4-a55d-6e525e11384b
Rule aliases IF (3)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Storage/storageAccounts/isHnsEnabled Microsoft.Storage storageAccounts properties.isHnsEnabled True False
Microsoft.Storage/storageAccounts/isNfsV3Enabled Microsoft.Storage storageAccounts properties.isNfsV3Enabled True False
Microsoft.Storage/storageAccounts/sku.name Microsoft.Storage
Microsoft.Storage		 storageAccounts
storageAccounts		 properties.accountType
sku.name		 False
True		 sku.name
 False
False
THEN-ExistenceCondition (1)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Storage/storageAccounts/blobServices/default.restorePolicy.enabled Microsoft.Storage storageAccounts/blobServices properties.restorePolicy.enabled True True
Rule resource types IF (1)
Microsoft.Storage/StorageAccounts
THEN-Deployment (4)
Microsoft.DataProtection/backupvaults/backupInstances
Microsoft.Resources/deployments
Microsoft.Storage/storageAccounts
Microsoft.Storage/storageAccounts/blobServices
Compliance
The following 2 compliance controls are associated with this Policy definition '[Preview]: Configure blob backup for all storage accounts that do not contain a given tag to a backup vault in the same region' (958dbd4e-0e20-4385-a082-d3f20c2a6ad8)
Control Domain Control Name MetadataId Category Title Owner Requirements Description Info Policy#
mp.info.6 Backups mp.info.6 Backups 404 not found n/a n/a 65
op.cont.4 Alternative means op.cont.4 Alternative means 404 not found n/a n/a 95
Initiatives usage
Initiative DisplayName Initiative Id Initiative Category State Type
Spain ENS 175daf90-21e1-4fec-b745-7b4c909aa94c Regulatory Compliance GA BuiltIn
History
Date/Time (UTC ymd) (i) Change type Change detail
2022-01-07 18:14:35 change Major, suffix remains equal (1.0.0-preview > 2.0.0-preview)
2021-12-06 22:17:57 add 958dbd4e-0e20-4385-a082-d3f20c2a6ad8
JSON compare
compare mode: version left: version right:
JSON
api-version=2021-06-01
EPAC