Azure Policy built-in definitions for Azure Web PubSub

This page is an index of Azure Policy built-in policy definitions for Azure Web PubSub. For Azure Policy built-ins for other services, see Azure Policy built-in definitions.

The name of each built-in policy definition links to the policy definition in the Azure portal. Use the link in the Version column to view the source on the Azure Policy GitHub repo.

Policy definitions

Name (Azure portal)	Description	Effect(s)	Version (GitHub)
Azure Web PubSub Service should disable public network access	Disabling public network access improves security by ensuring that Azure Web PubSub service isn't exposed on the public internet. Creating private endpoints can limit exposure of Azure Web PubSub service. Learn more at: https://aka.ms/awps/networkacls.	Audit, Deny, Disabled	1.0.0
Azure Web PubSub Service should enable diagnostic logs	Audit enabling of diagnostic logs. This enables you to recreate activity trails to use for investigation purposes; when a security incident occurs or when your network is compromised	AuditIfNotExists, Disabled	1.0.0
Azure Web PubSub Service should have local authentication methods disabled	Disabling local authentication methods improves security by ensuring that Azure Web PubSub Service exclusively require Azure Active Directory identities for authentication.	Audit, Deny, Disabled	1.0.0
Azure Web PubSub Service should use a SKU that supports private link	With supported SKU, Azure Private Link lets you connect your virtual network to Azure services without a public IP address at the source or destination. The Private Link platform handles the connectivity between the consumer and services over the Azure backbone network. By mapping private endpoints to Azure Web PubSub service, you can reduce data leakage risks. Learn more about private links at: https://aka.ms/awps/privatelink.	Audit, Deny, Disabled	1.0.0
Azure Web PubSub Service should use private link	Azure Private Link lets you connect your virtual networks to Azure services without a public IP address at the source or destination. The private link platform handles the connectivity between the consumer and services over the Azure backbone network. By mapping private endpoints to your Azure Web PubSub Service, you can reduce data leakage risks. Learn more about private links at: https://aka.ms/awps/privatelink.	Audit, Disabled	1.0.0
Configure Azure Web PubSub Service to disable local authentication	Disable local authentication methods so that your Azure Web PubSub Service exclusively requires Azure Active Directory identities for authentication.	Modify, Disabled	1.0.0
Configure Azure Web PubSub Service to disable public network access	Disable public network access for your Azure Web PubSub resource so that it's not accessible over the public internet. This can reduce data leakage risks. Learn more at: https://aka.ms/awps/networkacls.	Modify, Disabled	1.0.0
Configure Azure Web PubSub Service to use private DNS zones	Use private DNS zones to override the DNS resolution for a private endpoint. A private DNS zone links to your virtual network to resolve to Azure Web PubSub service. Learn more at: https://aka.ms/awps/privatelink.	DeployIfNotExists, Disabled	1.0.0
Configure Azure Web PubSub Service with private endpoints	Private endpoints connect your virtual networks to Azure services without a public IP address at the source or destination. By mapping private endpoints to Azure Web PubSub service, you can reduce data leakage risks. Learn more about private links at: https://aka.ms/awps/privatelink.	DeployIfNotExists, Disabled	1.0.0

Next steps

• See the built-ins on the Azure Policy GitHub repo.
• Review the Azure Policy definition structure.
• Review Understanding policy effects.