App Service app slots should use managed identity

Azure BuiltIn Policy definition

Alias

Namespace

ResourceType

Path

PathIsDefault

DefaultPath

Modifiable

Microsoft.Web/sites/slots/config/managedServiceIdentityId

Microsoft.Web

sites/slots/config

properties.managedServiceIdentityId

True

False

Microsoft.Web/sites/slots/config/xmanagedServiceIdentityId

Microsoft.Web

sites/slots/config

properties.xManagedServiceIdentityId

True

False

Rows: 1-1 / 1

Records:

Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, [empty], [nonempty], rgx:
Learn more

TableFilter v0.7.3

https://www.tablefilter.com/
©2015-2025 Max Guglielmi

Page of 1

Initiative DisplayName

Initiative Id

Initiative Category

State

Type

polSet in AzUSGov

[Preview]: Control the use of App Service in a Virtual Enclave

528d78c5-246c-4f26-ade6-d30798705411

VirtualEnclaves

Preview

BuiltIn

true

Date/Time (UTC ymd) (i)

Change type

Change detail

2022-10-07 16:34:28

add

4a15c15f-90d5-4a1f-8b63-2903944963fd

{

displayName: "App Service app slots should use managed identity",
policyType: "BuiltIn",
mode: "Indexed",
description: "Use a managed identity for enhanced authentication security",
metadata: {2 items
- version: "1.0.0",
- category: "App Service"
},
parameters: {1 item
- effect: {4 items
  - type: "String",
  - metadata: {2 items
    - displayName: "Effect",
    - description: "Enable or disable the execution of the policy"
    },
  - allowedValues: [2 items
    - "AuditIfNotExists",
    - "Disabled"
    ],
  - defaultValue: "AuditIfNotExists"
  }
},
policyRule: {2 items
- if: {1 item
  - allOf: [2 items
    - {2 items
      - field: "type",
      - equals: "Microsoft.Web/sites/slots"
      },
    - {2 items
      - field: "kind",
      - notContains: "functionapp"
      }
    ]
  },
- then: {2 items
  - effect: "[parameters('effect')]",
  - details: {3 items
    - type: "Microsoft.Web/sites/slots/config",
    - name: "web",
    - existenceCondition: {1 item
      - anyOf: [2 items
        {2 items
        field: "Microsoft.Web/sites/slots/config/managedServiceIdentityId",
        exists: "true"
        },
        {2 items
        field: "Microsoft.Web/sites/slots/config/xmanagedServiceIdentityId",
        exists: "true"
        }
        ]
      }
    }
  }
}

}