Azure Analysis service - Firewall off deny policy

Question

I am trying to build a policy to deny disabling firewall in azure analysis service. But not able to deny disabling firewall.

I used below definition but it's not working

"if": {
        "allOf": [
          {
            "field": "Microsoft.AnalysisServices/servers/ipV4FirewallSettings",
            "equals": "Disabled"
          }
        ]
      },
      "then": {
        "effect": "deny"
      }

score 0 · Answer 1 · answered Jun 18 '21 at 09:18

The other method you can approach to meet your requirement by disabling the firewall for the Analysis service and then apply ReadOnly policy to that service.

You can also try the below code to create custom policy:

{
    "policyRule": {
        "if": {
            "allOf": [{
                    "field": "type",
                    "equals": "Microsoft.AnalysisServices/servers/ipV4FirewallSettings"
                }
            ]
        },
        "then": {
            "effect": "deny"
        }
    }
}

Refer to Hardening Azure Analysis Services with the new firewall capability for more details about Analysis Services and firewall.

I don't want to deny firwallsetting activities. I just want to deny disabling firewall — Nirmal Kumar, Jun 21 '21 at 08:07
do you want that unauthorized person can't manipulate your firewall by disabling it? — Utkarsh Pal, Jun 21 '21 at 08:13

Azure Analysis service - Firewall off deny policy

1 Answers1