Built-in Policy Release 84417abf (#1399)

Co-authored-by: Azure Policy Bot <[email protected]>
Azure · Oct 31, 2024 · a060640 · a060640
1 parent 76e259e
commit a060640
Show file tree

Hide file tree

Showing 15 changed files with 330 additions and 44 deletions.
diff --git a/built-in-policies/policyDefinitions/App Service/RequireLatestTls_FunctionApp_Audit.json b/built-in-policies/policyDefinitions/App Service/RequireLatestTls_FunctionApp_Audit.json
@@ -5,10 +5,10 @@
     "mode": "Indexed",
     "description": "Periodically, newer versions are released for TLS either due to security flaws, include additional functionality, and enhance speed. Upgrade to the latest TLS version for Function apps to take advantage of security fixes, if any, and/or new functionalities of the latest version.",
     "metadata": {
-      "version": "2.0.1",
+      "version": "2.1.0",
       "category": "App Service"
     },
-    "version": "2.0.1",
+    "version": "2.1.0",
     "parameters": {
       "effect": {
         "type": "string",
@@ -47,12 +47,13 @@
           "name": "web",
           "existenceCondition": {
             "field": "Microsoft.Web/sites/config/minTlsVersion",
-            "equals": "1.2"
+            "equals": "1.3"
           }
         }
       }
     },
     "versions": [
+      "2.1.0",
       "2.0.1"
     ]
   },

diff --git a/built-in-policies/policyDefinitions/App Service/RequireLatestTls_FunctionApp_DINE.json b/built-in-policies/policyDefinitions/App Service/RequireLatestTls_FunctionApp_DINE.json
@@ -5,10 +5,10 @@
     "mode": "Indexed",
     "description": "Periodically, newer versions are released for TLS either due to security flaws, include additional functionality, and enhance speed. Upgrade to the latest TLS version for Function apps to take advantage of security fixes, if any, and/or new functionalities of the latest version.",
     "metadata": {
-      "version": "1.0.1",
+      "version": "1.1.0",
       "category": "App Service"
     },
-    "version": "1.0.1",
+    "version": "1.1.0",
     "parameters": {
       "effect": {
         "type": "string",
@@ -47,7 +47,7 @@
           "name": "web",
           "existenceCondition": {
             "field": "Microsoft.Web/sites/config/minTlsVersion",
-            "equals": "1.2"
+            "equals": "1.3"
           },
           "roleDefinitionIds": [
             "/providers/microsoft.authorization/roleDefinitions/de139f84-1756-47ae-9be6-808fbbe84772"
@@ -75,7 +75,7 @@
                     "apiVersion": "2021-02-01",
                     "name": "[concat(parameters('siteName'), '/web')]",
                     "properties": {
-                      "minTlsVersion": "1.2"
+                      "minTlsVersion": "1.3"
                     }
                   }
                 ],
@@ -87,6 +87,7 @@
       }
     },
     "versions": [
+      "1.1.0",
       "1.0.1"
     ]
   },

diff --git a/built-in-policies/policyDefinitions/App Service/RequireLatestTls_FunctionApp_Slot_Audit.json b/built-in-policies/policyDefinitions/App Service/RequireLatestTls_FunctionApp_Slot_Audit.json
@@ -5,10 +5,10 @@
     "mode": "Indexed",
     "description": "Periodically, newer versions are released for TLS either due to security flaws, include additional functionality, and enhance speed. Upgrade to the latest TLS version for Function apps to take advantage of security fixes, if any, and/or new functionalities of the latest version.",
     "metadata": {
-      "version": "1.0.0",
+      "version": "1.1.0",
       "category": "App Service"
     },
-    "version": "1.0.0",
+    "version": "1.1.0",
     "parameters": {
       "effect": {
         "type": "string",
@@ -47,12 +47,13 @@
           "name": "web",
           "existenceCondition": {
             "field": "Microsoft.Web/sites/slots/config/minTlsVersion",
-            "equals": "1.2"
+            "equals": "1.3"
           }
         }
       }
     },
     "versions": [
+      "1.1.0",
       "1.0.0"
     ]
   },

diff --git a/built-in-policies/policyDefinitions/App Service/RequireLatestTls_FunctionApp_Slot_DINE.json b/built-in-policies/policyDefinitions/App Service/RequireLatestTls_FunctionApp_Slot_DINE.json
@@ -5,10 +5,10 @@
     "mode": "Indexed",
     "description": "Periodically, newer versions are released for TLS either due to security flaws, include additional functionality, and enhance speed. Upgrade to the latest TLS version for Function apps to take advantage of security fixes, if any, and/or new functionalities of the latest version.",
     "metadata": {
-      "version": "1.1.0",
+      "version": "1.2.0",
       "category": "App Service"
     },
-    "version": "1.1.0",
+    "version": "1.2.0",
     "parameters": {
       "effect": {
         "type": "string",
@@ -47,7 +47,7 @@
           "name": "web",
           "existenceCondition": {
             "field": "Microsoft.Web/sites/slots/config/minTlsVersion",
-            "equals": "1.2"
+            "equals": "1.3"
           },
           "roleDefinitionIds": [
             "/providers/microsoft.authorization/roleDefinitions/de139f84-1756-47ae-9be6-808fbbe84772"
@@ -81,7 +81,7 @@
                     "apiVersion": "2021-02-01",
                     "name": "[format('{0}/{1}/web', split(parameters('siteId'),'/')[8], parameters('siteName'))]",
                     "properties": {
-                      "minTlsVersion": "1.2"
+                      "minTlsVersion": "1.3"
                     }
                   }
                 ],
@@ -93,6 +93,7 @@
       }
     },
     "versions": [
+      "1.2.0",
       "1.1.0"
     ]
   },

diff --git a/built-in-policies/policyDefinitions/App Service/RequireLatestTls_WebApp_Audit.json b/built-in-policies/policyDefinitions/App Service/RequireLatestTls_WebApp_Audit.json
@@ -5,10 +5,10 @@
     "mode": "Indexed",
     "description": "Periodically, newer versions are released for TLS either due to security flaws, include additional functionality, and enhance speed. Upgrade to the latest TLS version for App Service apps to take advantage of security fixes, if any, and/or new functionalities of the latest version.",
     "metadata": {
-      "version": "2.0.1",
+      "version": "2.1.0",
       "category": "App Service"
     },
-    "version": "2.0.1",
+    "version": "2.1.0",
     "parameters": {
       "effect": {
         "type": "string",
@@ -43,12 +43,13 @@
           "name": "web",
           "existenceCondition": {
             "field": "Microsoft.Web/sites/config/minTlsVersion",
-            "equals": "1.2"
+            "equals": "1.3"
           }
         }
       }
     },
     "versions": [
+      "2.1.0",
       "2.0.1"
     ]
   },

diff --git a/built-in-policies/policyDefinitions/App Service/RequireLatestTls_WebApp_DINE.json b/built-in-policies/policyDefinitions/App Service/RequireLatestTls_WebApp_DINE.json
@@ -5,10 +5,10 @@
     "mode": "Indexed",
     "description": "Periodically, newer versions are released for TLS either due to security flaws, include additional functionality, and enhance speed. Upgrade to the latest TLS version for App Service apps to take advantage of security fixes, if any, and/or new functionalities of the latest version.",
     "metadata": {
-      "version": "1.0.1",
+      "version": "1.1.0",
       "category": "App Service"
     },
-    "version": "1.0.1",
+    "version": "1.1.0",
     "parameters": {
       "effect": {
         "type": "string",
@@ -43,7 +43,7 @@
           "name": "web",
           "existenceCondition": {
             "field": "Microsoft.Web/sites/config/minTlsVersion",
-            "equals": "1.2"
+            "equals": "1.3"
           },
           "roleDefinitionIds": [
             "/providers/microsoft.authorization/roleDefinitions/de139f84-1756-47ae-9be6-808fbbe84772"
@@ -71,7 +71,7 @@
                     "apiVersion": "2021-02-01",
                     "name": "[concat(parameters('siteName'), '/web')]",
                     "properties": {
-                      "minTlsVersion": "1.2"
+                      "minTlsVersion": "1.3"
                     }
                   }
                 ],
@@ -83,6 +83,7 @@
       }
     },
     "versions": [
+      "1.1.0",
       "1.0.1"
     ]
   },

diff --git a/built-in-policies/policyDefinitions/App Service/RequireLatestTls_WebApp_Slot_Audit.json b/built-in-policies/policyDefinitions/App Service/RequireLatestTls_WebApp_Slot_Audit.json
@@ -5,10 +5,10 @@
     "mode": "Indexed",
     "description": "Periodically, newer versions are released for TLS either due to security flaws, include additional functionality, and enhance speed. Upgrade to the latest TLS version for App Service apps to take advantage of security fixes, if any, and/or new functionalities of the latest version.",
     "metadata": {
-      "version": "1.0.0",
+      "version": "1.1.0",
       "category": "App Service"
     },
-    "version": "1.0.0",
+    "version": "1.1.0",
     "parameters": {
       "effect": {
         "type": "string",
@@ -43,12 +43,13 @@
           "name": "web",
           "existenceCondition": {
             "field": "Microsoft.Web/sites/slots/config/minTlsVersion",
-            "equals": "1.2"
+            "equals": "1.3"
           }
         }
       }
     },
     "versions": [
+      "1.1.0",
       "1.0.0"
     ]
   },

diff --git a/built-in-policies/policyDefinitions/App Service/RequireLatestTls_WebApp_Slot_DINE.json b/built-in-policies/policyDefinitions/App Service/RequireLatestTls_WebApp_Slot_DINE.json
@@ -5,10 +5,10 @@
     "mode": "Indexed",
     "description": "Periodically, newer versions are released for TLS either due to security flaws, include additional functionality, and enhance speed. Upgrade to the latest TLS version for App Service apps to take advantage of security fixes, if any, and/or new functionalities of the latest version.",
     "metadata": {
-      "version": "1.1.0",
+      "version": "1.2.0",
       "category": "App Service"
     },
-    "version": "1.1.0",
+    "version": "1.2.0",
     "parameters": {
       "effect": {
         "type": "string",
@@ -43,7 +43,7 @@
           "name": "web",
           "existenceCondition": {
             "field": "Microsoft.Web/sites/slots/config/minTlsVersion",
-            "equals": "1.2"
+            "equals": "1.3"
           },
           "roleDefinitionIds": [
             "/providers/microsoft.authorization/roleDefinitions/de139f84-1756-47ae-9be6-808fbbe84772"
@@ -77,7 +77,7 @@
                     "apiVersion": "2021-02-01",
                     "name": "[format('{0}/{1}/web', split(parameters('siteId'),'/')[8], parameters('siteName'))]",
                     "properties": {
-                      "minTlsVersion": "1.2"
+                      "minTlsVersion": "1.3"
                     }
                   }
                 ],
@@ -89,6 +89,7 @@
       }
     },
     "versions": [
+      "1.2.0",
       "1.1.0"
     ]
   },