Update Public IPs Associated with Azure Firewall Should Have DDoS Pro…

…tection Enabled.json
Azure · Sep 3, 2024 · b032b60 · b032b60
1 parent 543301f
commit b032b60
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/...nabled/Public IPs Associated with Azure Firewall Should Have DDoS Protection Enabled.json b/...nabled/Public IPs Associated with Azure Firewall Should Have DDoS Protection Enabled.json
@@ -3,7 +3,7 @@
     "displayName": "Public IPs Associated with Azure Firewall Should Have DDoS Protection Enabled",
     "policyType": "Custom",
     "mode": "All",
-    "description": "Public IPs Associated with Azure Firewall Should Have DDoS Protection Enabled.\n\nNote: The Policy checks if DDoS Protection (Virtual Network Inherited or IP Protection is enabled on all Public IP addresses. For Azure Firewall Public IP addresses that do not have DDoS Protection, a non compliance state is returned. ",
+    "description": "Public IPs Associated with Azure Firewall Should Have DDoS Protection Enabled.\n\nNote: The Policy checks if DDoS Protection (Virtual Network Inherited or IP Protection is enabled on all Public IP addresses. For Azure Firewall Public IP addresses that do not have DDoS Protection, a non compliance state is returned. However if DDoS Protection on the VNET is not enabled then this policy is not valid in this scope. ",
     "metadata": {
       "version": "1.0.0",
       "category": "Network",
@@ -60,4 +60,4 @@
   "type": "Microsoft.Authorization/policyDefinitions",
   "name": "fddd3f17-bdbb-4b35-881d-d66ca0dea9ba",
   }
-}
+}