Ensuring alignment of effect allowed values in the initiative with th…

…e ones from the single policyDefinitions
Azure · Jul 4, 2024 · fbd8ff9 · fbd8ff9
1 parent f775451
commit fbd8ff9
Show file tree

Hide file tree

Showing 4 changed files with 29 additions and 5 deletions.
diff --git a/src/resources/Microsoft.Authorization/policySetDefinitions/Enforce-Guardrails-KeyVault.json b/src/resources/Microsoft.Authorization/policySetDefinitions/Enforce-Guardrails-KeyVault.json
@@ -236,8 +236,11 @@
                 "type": "string",
                 "defaultValue": "Disabled",
                 "allowedValues": [
+                    "audit",
                     "Audit",
+                    "deny",
                     "Deny",
+                    "disabled",
                     "Disabled"
                 ]
             },

diff --git a/...resources/Microsoft.Authorization/policySetDefinitions/Enforce-Guardrails-Kubernetes.json b/...resources/Microsoft.Authorization/policySetDefinitions/Enforce-Guardrails-Kubernetes.json
@@ -81,26 +81,35 @@
                 "type": "string",
                 "defaultValue": "Deny",
                 "allowedValues": [
+                    "audit",
                     "Audit",
+                    "deny",
                     "Deny",
+                    "disabled",
                     "Disabled"
                 ]
             },
             "aksPrivEscalation": {
                 "type": "string",
                 "defaultValue": "Deny",
                 "allowedValues": [
+                    "audit",
                     "Audit",
+                    "deny",
                     "Deny",
+                    "disabled",
                     "Disabled"
                 ]
             },
             "aksAllowedCapabilities": {
                 "type": "string",
                 "defaultValue": "Deny",
                 "allowedValues": [
+                    "audit",
                     "Audit",
+                    "deny",
                     "Deny",
+                    "disabled",
                     "Disabled"
                 ]
             },
@@ -117,17 +126,23 @@
                 "type": "string",
                 "defaultValue": "Deny",
                 "allowedValues": [
+                    "audit",
                     "Audit",
+                    "deny",
                     "Deny",
+                    "disabled",
                     "Disabled"
                 ]
             },
             "aksDefaultNamespace": {
                 "type": "string",
                 "defaultValue": "Deny",
                 "allowedValues": [
+                    "audit",
                     "Audit",
+                    "deny",
                     "Deny",
+                    "disabled",
                     "Disabled"
                 ]
             },
@@ -144,8 +159,11 @@
                 "type": "string",
                 "defaultValue": "Deny",
                 "allowedValues": [
+                    "audit",
                     "Audit",
+                    "deny",
                     "Deny",
+                    "disabled",
                     "Disabled"
                 ]
             },

diff --git a/src/resources/Microsoft.Authorization/policySetDefinitions/Enforce-Guardrails-Network.json b/src/resources/Microsoft.Authorization/policySetDefinitions/Enforce-Guardrails-Network.json
@@ -56,7 +56,12 @@
             },
             "vnetModifyDdos": {
                 "type": "string",
-                "defaultValue": "Modify"
+                "defaultValue": "Modify",
+                "allowedValues": [
+                    "Audit",
+                    "Modify",
+                    "Disabled"
+                ]
             },
             "ddosPlanResourceId": {
                 "type": "string",
@@ -229,9 +234,8 @@
                 "type": "string",
                 "defaultValue": "Deny",
                 "allowedValues": [
-                    "Audit",
-                    "Deny",
-                    "Disabled"
+                    "Allow",
+                    "Deny"
                 ]
             },
             "modifyNsgRuleProtocol": {

diff --git a/src/resources/Microsoft.Authorization/policySetDefinitions/Enforce-Guardrails-Synapse.json b/src/resources/Microsoft.Authorization/policySetDefinitions/Enforce-Guardrails-Synapse.json
@@ -65,7 +65,6 @@
                 "defaultValue": "Audit",
                 "allowedValues": [
                     "Audit",
-                    "Deny",
                     "Disabled"
                 ]
             },