AzPolicyAdvertizer

last sync: 2024-Nov-25 18:54:24 UTC

Configure key vaults to enable firewall

Azure BuiltIn Policy definition

Source

Azure Portal

Display name

Configure key vaults to enable firewall

ac673a9a-f77d-4846-b2d8-a57f8e1c01dc

Version

1.1.1
Details on versioning

Versioning

Versions supported for Versioning: 1
1.1.1
Built-in Versioning [Preview]

Category

Key Vault
Microsoft Learn

Description

Enable the key vault firewall so that the key vault is not accessible by default to any public IPs. You can then configure specific IP ranges to limit access to those networks. Learn more at: https://docs.microsoft.com/azure/key-vault/general/network-security

Mode

Indexed

Type

BuiltIn

Preview

False

Deprecated

False

Effect

Default
Modify
Allowed
Modify, Disabled

RBAC role(s)

Role Name	Role Id
Key Vault Contributor	f25e0fa2-a7c8-4377-a976-54943a77a395

Rule aliases

IF (1)

Alias	Namespace	ResourceType	Path	PathIsDefault	DefaultPath	Modifiable
Microsoft.KeyVault/vaults/networkAcls.defaultAction	Microsoft.KeyVault	vaults	properties.networkAcls.defaultAction	True		True

THEN-Operations (1)

Alias	Namespace	ResourceType	Path	PathIsDefault	DefaultPath	Modifiable
Microsoft.KeyVault/vaults/networkAcls.defaultAction	Microsoft.KeyVault	vaults	properties.networkAcls.defaultAction	True		True

Rule resource types

IF (1)
Microsoft.KeyVault/vaults

Compliance

The following 1 compliance controls are associated with this Policy definition 'Configure key vaults to enable firewall' (ac673a9a-f77d-4846-b2d8-a57f8e1c01dc)

Control Domain	Control	Name	MetadataId	Category	Title	Owner	Requirements	Description	Info	Policy#
	mp.com.1 Secure perimeter	mp.com.1 Secure perimeter	404 not found				n/a	n/a		49

Initiatives usage

Initiative DisplayName	Initiative Id	Initiative Category	State	Type
Enforce additional recommended guardrails for Key Vault	Enforce-Guardrails-KeyVault-Sup	Key Vault	GA	ALZ
Spain ENS	175daf90-21e1-4fec-b745-7b4c909aa94c	Regulatory Compliance	GA	BuiltIn

History

Date/Time (UTC ymd) (i)	Change type	Change detail
2022-06-10 16:31:21	change	Minor, old suffix: preview (1.0.0-preview > 1.1.1)
2021-04-21 13:28:46	add	ac673a9a-f77d-4846-b2d8-a57f8e1c01dc

JSON compare

compare mode: version left: version right:

JSON

api-version=2021-06-01
EPAC