Update Library Templates (automated)

modules/archetypes/lib/policy_definitions/policy_definition_es_append_redis_disablenonsslport.json

@@ -9,7 +9,7 @@
     "displayName": "Azure Cache for Redis Append and the enforcement that enableNonSslPort is disabled.",
     "description": "Azure Cache for Redis Append and the enforcement that enableNonSslPort is disabled. Enables secure server to client by enforce  minimal Tls Version to secure the connection between your database server and your client applications helps protect against 'man in the middle' attacks by encrypting the data stream between the server and your application. This configuration enforces that SSL is always enabled for accessing your database server.",
     "metadata": {
-      "version": "1.0.0",
+      "version": "1.0.1",
       "category": "Cache",
       "source": "https://github.com/Azure/Enterprise-Scale/",
       "alzCloudEnvironments": [
@@ -24,8 +24,7 @@
         "defaultValue": "Append",
         "allowedValues": [
           "Append",
-          "Disabled",
-          "Modify"
+          "Disabled"
         ],
         "metadata": {
           "displayName": "Effect Azure Cache for Redis",

modules/archetypes/lib/policy_definitions/policy_definition_es_deny_mgmtports_from_internet.json

@@ -9,7 +9,7 @@
     "displayName": "Management port access from the Internet should be blocked",
     "description": "This policy denies any network security rule that allows management port access from the Internet",
     "metadata": {
-      "version": "1.0.0",
+      "version": "2.0.0",
       "category": "Network",
       "source": "https://github.com/Azure/Enterprise-Scale/",
       "alzCloudEnvironments": [
@@ -83,10 +83,17 @@
                   },
                   {
                     "count": {
-                      "field": "Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]",
+                      "value": "[parameters('ports')]",
+                      "name": "ports",
                       "where": {
-                        "value": "[if(and(not(empty(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')))), contains(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')),'-')), and(lessOrEquals(int(first(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')), '-'))),parameters('ports')),greaterOrEquals(int(last(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')), '-'))),parameters('ports'))) , 'false')]",
-                        "equals": "true"
+                        "count": {
+                          "field": "Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]",
+                          "where": {
+                            "value": "[if(and(not(empty(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')))), contains(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')),'-')), and(lessOrEquals(int(first(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')), '-'))),int(current('ports'))),greaterOrEquals(int(last(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')), '-'))),int(current('ports')))) , 'false')]",
+                            "equals": "true"
+                          }
+                        },
+                        "greater": 0
                       }
                     },
                     "greater": 0

modules/archetypes/lib/policy_set_definitions/policy_set_definition_es_deploy_mdfc_config.tmpl.json

@@ -8,7 +8,7 @@
     "displayName": "Deploy Microsoft Defender for Cloud configuration",
     "description": "Deploy Microsoft Defender for Cloud configuration",
     "metadata": {
-      "version": "5.0.0",
+      "version": "5.0.1",
       "category": "Security Center",
       "source": "https://github.com/Azure/Enterprise-Scale/",
       "alzCloudEnvironments": [
@@ -340,7 +340,7 @@
         "policyDefinitionReferenceId": "defenderForKeyVaults",
         "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1f725891-01c0-420a-9059-4fa46cb770b7",
         "parameters": {
-          "Effect": {
+          "effect": {
             "value": "[parameters('enableAscForKeyVault')]"
           }
         },

modules/archetypes/lib/policy_set_definitions/policy_set_definition_es_enforce_alz_decomm.tmpl.json

@@ -48,4 +48,4 @@
     ],
     "policyDefinitionGroups": null
   }
-}
+}

modules/archetypes/lib/policy_set_definitions/policy_set_definition_es_enforce_alz_sandbox.tmpl.json

@@ -81,4 +81,4 @@
     ],
     "policyDefinitionGroups": null
   }
-}
+}