AzPolicyAdvertizer

last sync: 2024-May-17 18:03:56 UTC

Azure Cosmos DB allowed locations

Azure BuiltIn Policy definition

Source

Azure Portal

Display name

Azure Cosmos DB allowed locations

0473574d-2d43-4217-aefe-941fcdf7e684

Version

1.1.0
Details on versioning

Category

Cosmos DB
Microsoft Learn

Description

This policy enables you to restrict the locations your organization can specify when deploying Azure Cosmos DB resources. Use to enforce your geo-compliance requirements.

Mode

Indexed

Type

BuiltIn

Preview

False

Deprecated

False

Effect

Default
Deny
Allowed
audit, Audit, deny, Deny, disabled, Disabled

RBAC role(s)

none

Rule aliases

IF (2)

Alias	Namespace	ResourceType	DefaultPath	Modifiable
Microsoft.DocumentDB/databaseAccounts/Locations[*]	Microsoft.DocumentDB	databaseAccounts	properties.locations[*]	false
Microsoft.DocumentDB/databaseAccounts/Locations[*].locationName	Microsoft.DocumentDB	databaseAccounts	properties.locations[*].locationName	false

Rule resource types

IF (1)
Microsoft.DocumentDB/databaseAccounts

Compliance

The following 1 compliance controls are associated with this Policy definition 'Azure Cosmos DB allowed locations' (0473574d-2d43-4217-aefe-941fcdf7e684)

Control Domain	Control	Name	MetadataId	Category	Title	Owner	Requirements	Description	Info	Policy#
SO.1 - Data Residency		SO.1 - Data Residency	404 not found				n/a	n/a		3

Initiatives usage

Initiative DisplayName	Initiative Id	Initiative Category	State	Type
[Preview]: Sovereignty Baseline - Confidential Policies	03de05a4-c324-4ccd-882f-a814ea8ab9ea	Regulatory Compliance	Preview	BuiltIn
[Preview]: Sovereignty Baseline - Global Policies	c1cbff38-87c0-4b9f-9f70-035c7a3b5523	Regulatory Compliance	Preview	BuiltIn

History

Date/Time (UTC ymd) (i)	Change type	Change detail
2022-04-01 20:29:14	change	Minor (1.0.0 > 1.1.0)
2020-03-17 09:22:59	add	0473574d-2d43-4217-aefe-941fcdf7e684

JSON compare

compare mode: version left: version right:

JSON

api-version=2021-06-01
EPAC