diff --git a/policyDefinitions/Video Indexer/Video Indexer Should Disable Public Network Access/azurepolicy.json b/policyDefinitions/Video Indexer/Video Indexer Should Disable Public Network Access/azurepolicy.json new file mode 100644 index 00000000..73cffaa3 --- /dev/null +++ b/policyDefinitions/Video Indexer/Video Indexer Should Disable Public Network Access/azurepolicy.json @@ -0,0 +1,45 @@ +{ + "name": "27e66ba1-7f71-4a8e-b981-ef06d5c78c1b", + "type": "Microsoft.Authorization/policyDefinitions", + "properties": { + "displayName": "Azure AI Video Indexer Should Disable Public Network Access", + "description": "This policy Denies the creation of AI Video Indexer accounts with Public Network Access enabled. Disabling Public Network Access helps to enhance the security of your Video Indexer accounts by restricting access to trusted networks only.", + "metadata": { + "version": "1.0.0", + "category": "Video Indexer" + }, + "mode": "Indexed", + "parameters": { + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Deny, Audit or Disabled the execution of the Policy" + }, + "allowedValues": [ + "Deny", + "Audit", + "Disabled" + ], + "defaultValue": "Deny" + } + }, + "policyRule": { + "if": { + "allOf": [ + { + "field": "type", + "equals": "Microsoft.VideoIndexer/accounts" + }, + { + "field": "Microsoft.VideoIndexer/accounts/publicNetworkAccess", + "notEquals": "Disabled" + } + ] + }, + "then": { + "effect": "[parameters('effect')]" + } + } + } +} \ No newline at end of file diff --git a/policyDefinitions/Video Indexer/Video Indexer Should Disable Public Network Access/azurepolicy.parameters.json b/policyDefinitions/Video Indexer/Video Indexer Should Disable Public Network Access/azurepolicy.parameters.json new file mode 100644 index 00000000..470fd378 --- /dev/null +++ b/policyDefinitions/Video Indexer/Video Indexer Should Disable Public Network Access/azurepolicy.parameters.json @@ -0,0 +1,15 @@ +{ + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Deny, Audit or Disabled the execution of the Policy" + }, + "allowedValues": [ + "Deny", + "Audit", + "Disabled" + ], + "defaultValue": "Deny" + } +} diff --git a/policyDefinitions/Video Indexer/Video Indexer Should Disable Public Network Access/azurepolicy.rules.json b/policyDefinitions/Video Indexer/Video Indexer Should Disable Public Network Access/azurepolicy.rules.json new file mode 100644 index 00000000..a03095c6 --- /dev/null +++ b/policyDefinitions/Video Indexer/Video Indexer Should Disable Public Network Access/azurepolicy.rules.json @@ -0,0 +1,17 @@ +{ + "if": { + "allOf": [ + { + "field": "type", + "equals": "Microsoft.VideoIndexer/accounts" + }, + { + "field": "Microsoft.VideoIndexer/accounts/publicNetworkAccess", + "notEquals": "Disabled" + } + ] + }, + "then": { + "effect": "[parameters('effect')]" + } +} \ No newline at end of file