-
Notifications
You must be signed in to change notification settings - Fork 1.1k
/
FunctionApp_Slot_Audit_java_Latest.json
81 lines (81 loc) · 2.5 KB
/
FunctionApp_Slot_Audit_java_Latest.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
{
"properties": {
"displayName": "Function app slots that use Java should use a specified 'Java version'",
"policyType": "BuiltIn",
"mode": "Indexed",
"description": "Periodically, newer versions are released for Java software either due to security flaws or to include additional functionality. Using the latest Java version for Function apps is recommended in order to take advantage of security fixes, if any, and/or new functionalities of the latest version. This policy only applies to Linux apps. This policy requires you to specify a Java version that meets your requirements.",
"metadata": {
"version": "1.0.0",
"category": "App Service"
},
"version": "1.0.0",
"parameters": {
"effect": {
"type": "String",
"metadata": {
"displayName": "Effect",
"description": "Enable or disable the execution of the policy"
},
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"defaultValue": "AuditIfNotExists"
},
"LinuxJavaVersion": {
"type": "String",
"defaultValue": "",
"metadata": {
"displayName": "Linux Java version",
"description": "Specify a supported Java version for Function apps"
}
}
},
"policyRule": {
"if": {
"allOf": [
{
"field": "type",
"equals": "Microsoft.Web/sites/slots"
},
{
"field": "kind",
"contains": "functionapp"
},
{
"field": "kind",
"notContains": "workflowapp"
},
{
"field": "kind",
"contains": "linux"
}
]
},
"then": {
"effect": "[parameters('effect')]",
"details": {
"type": "Microsoft.Web/sites/slots/config",
"name": "web",
"existenceCondition": {
"anyOf": [
{
"field": "Microsoft.Web/sites/slots/config/web.linuxFxVersion",
"notContains": "JAVA"
},
{
"field": "Microsoft.Web/sites/slots/config/web.linuxFxVersion",
"equals": "[concat('JAVA|', parameters('LinuxJavaVersion'))]"
}
]
}
}
}
},
"versions": [
"1.0.0"
]
},
"id": "/providers/Microsoft.Authorization/policyDefinitions/e1d1b522-02b0-4d18-a04f-5ab62d20445f",
"name": "e1d1b522-02b0-4d18-a04f-5ab62d20445f"
}