WebApp_Audit_java_Latest.json

{
  "properties": {
    "displayName": "App Service apps that use Java should use a specified 'Java version'",
    "policyType": "BuiltIn",
    "mode": "Indexed",
    "description": "Periodically, newer versions are released for Java software either due to security flaws or to include additional functionality. Using the latest Java version for App Service apps is recommended in order to take advantage of security fixes, if any, and/or new functionalities of the latest version. This policy only applies to Linux apps. This policy requires you to specify a Java version that meets your requirements.",
    "metadata": {
      "version": "3.1.0",
      "category": "App Service"
    },
    "version": "3.1.0",
    "parameters": {
      "effect": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect",
          "description": "Enable or disable the execution of the policy"
        }
      },
      "JavaLatestVersion": {
        "type": "String",
        "defaultValue": "11",
        "metadata": {
          "displayName": "Latest Java version",
          "description": "Latest supported Java version for App Services",
          "deprecated": true
        }
      },
      "LinuxJavaVersion": {
        "type": "String",
        "defaultValue": "",
        "metadata": {
          "displayName": "Linux Java version",
          "description": "Specify a supported Java version for App Service"
        }
      }
    },
    "policyRule": {
      "if": {
        "allOf": [
          {
            "field": "type",
            "equals": "Microsoft.Web/sites"
          },
          {
            "field": "kind",
            "notContains": "functionapp"
          },
          {
            "field": "kind",
            "contains": "linux"
          }
        ]
      },
      "then": {
        "effect": "[parameters('effect')]",
        "details": {
          "type": "Microsoft.Web/sites/config",
          "name": "web",
          "existenceCondition": {
            "anyOf": [
              {
                "field": "Microsoft.Web/sites/config/web.linuxFxVersion",
                "notContains": "JAVA"
              },
              {
                "field": "Microsoft.Web/sites/config/web.linuxFxVersion",
                "equals": "[concat('JAVA|', parameters('LinuxJavaVersion'))]"
              }
            ]
          }
        }
      }
    },
    "versions": [
      "3.1.0"
    ]
  },
  "id": "/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed",
  "name": "496223c3-ad65-4ecd-878a-bae78737e9ed"
}