Microsoft.Security locations/jitNetworkAccessPolicies

• Latest
• 2020-01-01
• 2015-06-01-preview

Bicep resource definition

The locations/jitNetworkAccessPolicies resource type can be deployed with operations that target:

• Resource groups - See resource group deployment commands

For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.Security/locations/jitNetworkAccessPolicies resource, add the following Bicep to your template.

resource symbolicname 'Microsoft.Security/locations/jitNetworkAccessPolicies@2020-01-01' = {
  parent: resourceSymbolicName
  kind: 'string'
  name: 'string'
  properties: {
    requests: [
      {
        justification: 'string'
        requestor: 'string'
        startTimeUtc: 'string'
        virtualMachines: [
          {
            id: 'string'
            ports: [
              {
                allowedSourceAddressPrefix: 'string'
                allowedSourceAddressPrefixes: [
                  'string'
                ]
                endTimeUtc: 'string'
                mappedPort: int
                number: int
                status: 'string'
                statusReason: 'string'
              }
            ]
          }
        ]
      }
    ]
    virtualMachines: [
      {
        id: 'string'
        ports: [
          {
            allowedSourceAddressPrefix: 'string'
            allowedSourceAddressPrefixes: [
              'string'
            ]
            maxRequestAccessDuration: 'string'
            number: int
            protocol: 'string'
          }
        ]
        publicIpAddress: 'string'
      }
    ]
  }
}

Property Values

Microsoft.Security/locations/jitNetworkAccessPolicies

Name	Description	Value
kind	Kind of the resource	string
name	The resource name	string (required)
parent	In Bicep, you can specify the parent resource for a child resource. You only need to add this property when the child resource is declared outside of the parent resource. For more information, see Child resource outside parent resource.	Symbolic name for resource of type: locations
properties		JitNetworkAccessPolicyProperties (required)

JitNetworkAccessPolicyProperties

Name	Description	Value
requests		JitNetworkAccessRequest[]
virtualMachines	Configurations for Microsoft.Compute/virtualMachines resource type.	JitNetworkAccessPolicyVirtualMachine[] (required)

JitNetworkAccessPolicyVirtualMachine

Name	Description	Value
id	Resource ID of the virtual machine that is linked to this policy	string (required)
ports	Port configurations for the virtual machine	JitNetworkAccessPortRule[] (required)
publicIpAddress	Public IP address of the Azure Firewall that is linked to this policy, if applicable	string

JitNetworkAccessPortRule

Name	Description	Value
allowedSourceAddressPrefix	Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".	string
allowedSourceAddressPrefixes	Mutually exclusive with the "allowedSourceAddressPrefix" parameter.	string[]
maxRequestAccessDuration	Maximum duration requests can be made for. In ISO 8601 duration format. Minimum 5 minutes, maximum 1 day	string (required)
number		int Constraints: Min value = 0 Max value = 65535 (required)
protocol		'*' 'TCP' 'UDP' (required)

JitNetworkAccessRequest

Name	Description	Value
justification	The justification for making the initiate request	string
requestor	The identity of the person who made the request	string (required)
startTimeUtc	The start time of the request in UTC	string (required)
virtualMachines		JitNetworkAccessRequestVirtualMachine[] (required)

JitNetworkAccessRequestPort

Name	Description	Value
allowedSourceAddressPrefix	Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".	string
allowedSourceAddressPrefixes	Mutually exclusive with the "allowedSourceAddressPrefix" parameter.	string[]
endTimeUtc	The date & time at which the request ends in UTC	string (required)
mappedPort	The port which is mapped to this port's number in the Azure Firewall, if applicable	int
number		int Constraints: Min value = 0 Max value = 65535 (required)
status	The status of the port	'Initiated' 'Revoked' (required)
statusReason	A description of why the status has its value	'Expired' 'NewerRequestInitiated' 'UserRequested' (required)

JitNetworkAccessRequestVirtualMachine

Name	Description	Value
id	Resource ID of the virtual machine that is linked to this policy	string (required)
ports	The ports that were opened for the virtual machine	JitNetworkAccessRequestPort[] (required)

ARM template resource definition

The locations/jitNetworkAccessPolicies resource type can be deployed with operations that target:

• Resource groups - See resource group deployment commands For a list of changed properties in each API version, see change log.

Usage Examples

Resource format

To create a Microsoft.Security/locations/jitNetworkAccessPolicies resource, add the following JSON to your template.

{
  "type": "Microsoft.Security/locations/jitNetworkAccessPolicies",
  "apiVersion": "2020-01-01",
  "name": "string",
  "kind": "string",
  "properties": {
    "requests": [
      {
        "justification": "string",
        "requestor": "string",
        "startTimeUtc": "string",
        "virtualMachines": [
          {
            "id": "string",
            "ports": [
              {
                "allowedSourceAddressPrefix": "string",
                "allowedSourceAddressPrefixes": [ "string" ],
                "endTimeUtc": "string",
                "mappedPort": "int",
                "number": "int",
                "status": "string",
                "statusReason": "string"
              }
            ]
          }
        ]
      }
    ],
    "virtualMachines": [
      {
        "id": "string",
        "ports": [
          {
            "allowedSourceAddressPrefix": "string",
            "allowedSourceAddressPrefixes": [ "string" ],
            "maxRequestAccessDuration": "string",
            "number": "int",
            "protocol": "string"
          }
        ],
        "publicIpAddress": "string"
      }
    ]
  }
}

Property Values

Microsoft.Security/locations/jitNetworkAccessPolicies

Name	Description	Value
apiVersion	The api version	'2020-01-01'
kind	Kind of the resource	string
name	The resource name	string (required)
properties		JitNetworkAccessPolicyProperties (required)
type	The resource type	'Microsoft.Security/locations/jitNetworkAccessPolicies'

JitNetworkAccessPolicyProperties

Name	Description	Value
requests		JitNetworkAccessRequest[]
virtualMachines	Configurations for Microsoft.Compute/virtualMachines resource type.	JitNetworkAccessPolicyVirtualMachine[] (required)

JitNetworkAccessPolicyVirtualMachine

Name	Description	Value
id	Resource ID of the virtual machine that is linked to this policy	string (required)
ports	Port configurations for the virtual machine	JitNetworkAccessPortRule[] (required)
publicIpAddress	Public IP address of the Azure Firewall that is linked to this policy, if applicable	string

JitNetworkAccessPortRule

Name	Description	Value
allowedSourceAddressPrefix	Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".	string
allowedSourceAddressPrefixes	Mutually exclusive with the "allowedSourceAddressPrefix" parameter.	string[]
maxRequestAccessDuration	Maximum duration requests can be made for. In ISO 8601 duration format. Minimum 5 minutes, maximum 1 day	string (required)
number		int Constraints: Min value = 0 Max value = 65535 (required)
protocol		'*' 'TCP' 'UDP' (required)

JitNetworkAccessRequest

Name	Description	Value
justification	The justification for making the initiate request	string
requestor	The identity of the person who made the request	string (required)
startTimeUtc	The start time of the request in UTC	string (required)
virtualMachines		JitNetworkAccessRequestVirtualMachine[] (required)

JitNetworkAccessRequestPort

Name	Description	Value
allowedSourceAddressPrefix	Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".	string
allowedSourceAddressPrefixes	Mutually exclusive with the "allowedSourceAddressPrefix" parameter.	string[]
endTimeUtc	The date & time at which the request ends in UTC	string (required)
mappedPort	The port which is mapped to this port's number in the Azure Firewall, if applicable	int
number		int Constraints: Min value = 0 Max value = 65535 (required)
status	The status of the port	'Initiated' 'Revoked' (required)
statusReason	A description of why the status has its value	'Expired' 'NewerRequestInitiated' 'UserRequested' (required)

JitNetworkAccessRequestVirtualMachine

Name	Description	Value
id	Resource ID of the virtual machine that is linked to this policy	string (required)
ports	The ports that were opened for the virtual machine	JitNetworkAccessRequestPort[] (required)

Terraform (AzAPI provider) resource definition

The locations/jitNetworkAccessPolicies resource type can be deployed with operations that target:

• Resource groups For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.Security/locations/jitNetworkAccessPolicies resource, add the following Terraform to your template.

resource "azapi_resource" "symbolicname" {
  type = "Microsoft.Security/locations/jitNetworkAccessPolicies@2020-01-01"
  name = "string"
  parent_id = "string"
  body = {
    kind = "string"
    properties = {
      requests = [
        {
          justification = "string"
          requestor = "string"
          startTimeUtc = "string"
          virtualMachines = [
            {
              id = "string"
              ports = [
                {
                  allowedSourceAddressPrefix = "string"
                  allowedSourceAddressPrefixes = [
                    "string"
                  ]
                  endTimeUtc = "string"
                  mappedPort = int
                  number = int
                  status = "string"
                  statusReason = "string"
                }
              ]
            }
          ]
        }
      ]
      virtualMachines = [
        {
          id = "string"
          ports = [
            {
              allowedSourceAddressPrefix = "string"
              allowedSourceAddressPrefixes = [
                "string"
              ]
              maxRequestAccessDuration = "string"
              number = int
              protocol = "string"
            }
          ]
          publicIpAddress = "string"
        }
      ]
    }
  }
}

Property Values

Microsoft.Security/locations/jitNetworkAccessPolicies

Name	Description	Value
kind	Kind of the resource	string
name	The resource name	string (required)
parent_id	The ID of the resource that is the parent for this resource.	ID for resource of type: locations
properties		JitNetworkAccessPolicyProperties (required)
type	The resource type	"Microsoft.Security/locations/jitNetworkAccessPolicies@2020-01-01"

JitNetworkAccessPolicyProperties

Name	Description	Value
requests		JitNetworkAccessRequest[]
virtualMachines	Configurations for Microsoft.Compute/virtualMachines resource type.	JitNetworkAccessPolicyVirtualMachine[] (required)

JitNetworkAccessPolicyVirtualMachine

Name	Description	Value
id	Resource ID of the virtual machine that is linked to this policy	string (required)
ports	Port configurations for the virtual machine	JitNetworkAccessPortRule[] (required)
publicIpAddress	Public IP address of the Azure Firewall that is linked to this policy, if applicable	string

JitNetworkAccessPortRule

Name	Description	Value
allowedSourceAddressPrefix	Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".	string
allowedSourceAddressPrefixes	Mutually exclusive with the "allowedSourceAddressPrefix" parameter.	string[]
maxRequestAccessDuration	Maximum duration requests can be made for. In ISO 8601 duration format. Minimum 5 minutes, maximum 1 day	string (required)
number		int Constraints: Min value = 0 Max value = 65535 (required)
protocol		'*' 'TCP' 'UDP' (required)

JitNetworkAccessRequest

Name	Description	Value
justification	The justification for making the initiate request	string
requestor	The identity of the person who made the request	string (required)
startTimeUtc	The start time of the request in UTC	string (required)
virtualMachines		JitNetworkAccessRequestVirtualMachine[] (required)

JitNetworkAccessRequestPort

Name	Description	Value
allowedSourceAddressPrefix	Mutually exclusive with the "allowedSourceAddressPrefixes" parameter. Should be an IP address or CIDR, for example "192.168.0.3" or "192.168.0.0/16".	string
allowedSourceAddressPrefixes	Mutually exclusive with the "allowedSourceAddressPrefix" parameter.	string[]
endTimeUtc	The date & time at which the request ends in UTC	string (required)
mappedPort	The port which is mapped to this port's number in the Azure Firewall, if applicable	int
number		int Constraints: Min value = 0 Max value = 65535 (required)
status	The status of the port	'Initiated' 'Revoked' (required)
statusReason	A description of why the status has its value	'Expired' 'NewerRequestInitiated' 'UserRequested' (required)

JitNetworkAccessRequestVirtualMachine

Name	Description	Value
id	Resource ID of the virtual machine that is linked to this policy	string (required)
ports	The ports that were opened for the virtual machine	JitNetworkAccessRequestPort[] (required)