add changes

Azure · Oct 12, 2023 · 2d3f0fe · 2d3f0fe
1 parent 2224bc4
commit 2d3f0fe
Show file tree

Hide file tree

Showing 2 changed files with 300 additions and 255 deletions.
diff --git a/src/resources/Microsoft.Authorization/policySetDefinitions/Deny-PublicPaaSEndpoints.json b/src/resources/Microsoft.Authorization/policySetDefinitions/Deny-PublicPaaSEndpoints.json
@@ -274,6 +274,18 @@
           "Disabled"
         ],
         "defaultValue": "AuditIfNotExists"
+      },
+      "ContainerAppsEnvironmentDenyEffect" : {
+        "type": "String",
+        "metadata": {
+          "displayName": "Container Apps environment should disable public network access",
+          "description": "This policy denies creation of Container Apps Environment with exposed public endpoints"
+        },
+        "allowedValues": [
+          "Audit",
+          "Deny",
+          "Disabled"
+        ]
       }
     },
     "policyDefinitions": [
@@ -476,8 +488,18 @@
           }
         },
         "groupNames": []
+      },
+      {
+        "policyDefinitionReferenceId": "ContainerAppsEnvironmentDenyPublicIP",
+        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d074ddf8-01a5-4b5e-a2b8-964aed452c0a",
+        "parameters": {
+          "effect": {
+            "value": "[[parameters('ContainerAppsEnvironmentDenyEffect')]"
+          }
+        },
+        "groupNames": []
       }
     ],
     "policyDefinitionGroups": null
   }
-}
+}