last sync: 2024-Sep-18 17:50:42 UTC

Enforce recommended guardrails for Event Hub

Azure Landing Zones (ALZ) Policy Initiative (PolicySet)

Source Repository Azure Landing Zones (ALZ) GitHub
JSON Enforce-Guardrails-EventHub
Display nameEnforce recommended guardrails for Event Hub
IdEnforce-Guardrails-EventHub
Version1.0.0
Details on versioning
CategoryEvent Hub
DescriptionThis policy initiative is a group of policies that ensures Event Hub is compliant per regulated Landing Zones.
TypeCustom Azure Landing Zones (ALZ)
DeprecatedFalse
PreviewFalse
Policy count Total Policies: 4
Builtin Policies: 4
Static Policies: 0
ALZ Policies: 0
Policy used
Policy DisplayName Policy Id Category Effect Roles# Roles State Type
All authorization rules except RootManageSharedAccessKey should be removed from Event Hub namespace b278e460-7cfc-4451-8294-cccc40a940d7 Event Hub Default
Audit
Allowed
Audit, Deny, Disabled
0 GA BuiltIn
Azure Event Hub namespaces should have local authentication methods disabled 5d4e3c65-4873-47be-94f3-6f8b953a3598 Event Hub Default
Audit
Allowed
Audit, Deny, Disabled
0 GA BuiltIn
Configure Azure Event Hub namespaces to disable local authentication 57f35901-8389-40bb-ac49-3ba4f86d889d Event Hub Default
Modify
Allowed
Modify, Disabled
1 Azure Event Hubs Data Owner GA BuiltIn
Event Hub namespaces should have double encryption enabled 836cd60e-87f3-4e6a-a27c-29d687f01a4c Event Hub Default
Audit
Allowed
Audit, Deny, Disabled
0 GA BuiltIn
Roles used
Total Roles usage: 1
Total Roles unique usage: 1
Role Role Id Policies count Policies
Azure Event Hubs Data Owner f526a384-b230-433a-b45c-95f59c4a2dec 1 Configure Azure Event Hub namespaces to disable local authentication
History none
JSON compare n/a
JSON
EPAC