AzPolicyAdvertizer

last sync: 2025-May-21 17:57:15 UTC

Windows virtual machines should have Azure Monitor Agent installed

Azure BuiltIn Policy definition

Source Azure Portal
Display name Windows virtual machines should have Azure Monitor Agent installed
Id c02729e5-e5e7-4458-97fa-2b5ad0661f28
Version 3.2.0
Details on versioning
Versioning Versions supported for Versioning: 2
3.2.0
3.1.0
Built-in Versioning [Preview]
Category Monitoring
Microsoft Learn
Description Windows virtual machines should be monitored and secured through the deployed Azure Monitor Agent. The Azure Monitor Agent collects telemetry data from the guest OS. Windows virtual machines with supported OS and in supported regions are monitored for Azure Monitor Agent deployment. Learn more: https://aka.ms/AMAOverview.
Cloud environments AzureCloud = true
AzureUSGovernment = unknown
AzureChinaCloud = unknown
Available in AzUSGov Unknown, no evidence if Policy definition is/not available in AzureUSGovernment
Mode Indexed
Type BuiltIn
Preview False
Deprecated False
Effect Default
AuditIfNotExists
Allowed
AuditIfNotExists, Disabled
RBAC role(s) none
Rule aliases IF (5)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Compute/imageId Microsoft.Compute
Microsoft.Compute
Microsoft.Compute		 virtualMachines
virtualMachineScaleSets
disks		 properties.storageProfile.imageReference.id
properties.virtualMachineProfile.storageProfile.imageReference.id
properties.creationData.imageReference.id		 True
True
True

False
False
False
Microsoft.Compute/imageOffer Microsoft.Compute
Microsoft.Compute
Microsoft.Compute		 virtualMachines
virtualMachineScaleSets
disks		 properties.storageProfile.imageReference.offer
properties.virtualMachineProfile.storageProfile.imageReference.offer
properties.creationData.imageReference.id		 True
True
True

False
False
False
Microsoft.Compute/imagePublisher Microsoft.Compute
Microsoft.Compute
Microsoft.Compute		 virtualMachines
virtualMachineScaleSets
disks		 properties.storageProfile.imageReference.publisher
properties.virtualMachineProfile.storageProfile.imageReference.publisher
properties.creationData.imageReference.id		 True
True
True

False
False
False
Microsoft.Compute/imageSku Microsoft.Compute
Microsoft.Compute
Microsoft.Compute		 virtualMachines
virtualMachineScaleSets
disks		 properties.storageProfile.imageReference.sku
properties.virtualMachineProfile.storageProfile.imageReference.sku
properties.creationData.imageReference.id		 True
True
True

False
False
False
Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType Microsoft.Compute virtualMachines properties.storageProfile.osDisk.osType True True
THEN-ExistenceCondition (3)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Compute/virtualMachines/extensions/provisioningState Microsoft.Compute virtualMachines/extensions properties.provisioningState True False
Microsoft.Compute/virtualMachines/extensions/publisher Microsoft.Compute virtualMachines/extensions properties.publisher True False
Microsoft.Compute/virtualMachines/extensions/type Microsoft.Compute virtualMachines/extensions properties.type True False
Rule resource types IF (1)
Compliance
The following 2 compliance controls are associated with this Policy definition 'Windows virtual machines should have Azure Monitor Agent installed' (c02729e5-e5e7-4458-97fa-2b5ad0661f28)
Rows: 1-2 / 2

Columns:

Close

Columns▼Records:
Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, [empty], [nonempty], rgx:
Learn more

TableFilter v0.7.3

https://www.tablefilter.com/
©2015-2025 Max Guglielmi
?
Page of 1
Control Domain Control Name MetadataId Category Title Owner Requirements Description Info Policy#
ACAT_Security_Policies ACAT_Security_Policies ACAT Security Policies Guidelines for M365 Certification Protecting systems and resources Shared n/a Ensures that apps have strong security and compliance practices in place to protect customer data, security, and privacy. link 16
U.15.1 - Events Logged U.15.1 - Events logged 404 not found n/a n/a 53
Initiatives usage
Rows: 1-2 / 2
Records:
Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, [empty], [nonempty], rgx:
Learn more

TableFilter v0.7.3

https://www.tablefilter.com/
©2015-2025 Max Guglielmi
?
Page of 1
Initiative DisplayName Initiative Id Initiative Category State Type polSet in AzUSGov
ACAT for Microsoft 365 Certification 80307b86-ab81-45ab-bf4f-4e0b93cf3dd5 Regulatory Compliance GA BuiltIn unknown
NL BIO Cloud Theme V2 d8b2ffbe-c6a8-4622-965d-4ade11d1d2ee Regulatory Compliance GA BuiltIn unknown
History
Date/Time (UTC ymd) (i) Change type Change detail
2024-03-25 19:17:21 change Minor (3.1.0 > 3.2.0)
2023-04-06 17:42:16 change Minor (3.0.0 > 3.1.0)
2022-04-22 19:50:54 change Major (2.0.0 > 3.0.0)
2022-02-04 18:25:37 change Major (1.0.0 > 2.0.0)
2021-10-22 15:42:38 add c02729e5-e5e7-4458-97fa-2b5ad0661f28
JSON compare
compare mode: version left: version right:
3.1.0 → 3.2.0 RENAMED
@@ -3,9 +3,9 @@
3
  "policyType": "BuiltIn",
4
  "mode": "Indexed",
5
  "description": "Windows virtual machines should be monitored and secured through the deployed Azure Monitor Agent. The Azure Monitor Agent collects telemetry data from the guest OS. Windows virtual machines with supported OS and in supported regions are monitored for Azure Monitor Agent deployment. Learn more: https://aka.ms/AMAOverview.",
6
  "metadata": {
7
- "version": "3.1.0",
8
  "category": "Monitoring"
9
  },
10
  "parameters": {
11
  "effect": {
@@ -51,42 +51,64 @@
51
  {
52
  "field": "location",
53
  "in": [
54
  "australiacentral",
 
55
  "australiaeast",
56
  "australiasoutheast",
57
  "brazilsouth",
 
58
  "canadacentral",
59
  "canadaeast",
60
  "centralindia",
61
  "centralus",
 
62
  "eastasia",
63
- "eastus2euap",
64
  "eastus",
65
  "eastus2",
 
66
  "francecentral",
 
 
67
  "germanywestcentral",
 
 
68
  "japaneast",
69
  "japanwest",
 
70
  "jioindiawest",
71
  "koreacentral",
72
  "koreasouth",
 
 
73
  "northcentralus",
74
  "northeurope",
75
  "norwayeast",
 
 
 
76
  "southafricanorth",
 
77
  "southcentralus",
78
  "southeastasia",
79
  "southindia",
 
 
 
80
  "switzerlandnorth",
 
 
 
 
81
  "uaenorth",
82
  "uksouth",
83
  "ukwest",
84
  "westcentralus",
85
  "westeurope",
86
  "westindia",
87
  "westus",
88
- "westus2"
 
89
  ]
90
  },
91
  {
92
  "anyOf": [
 
3
  "policyType": "BuiltIn",
4
  "mode": "Indexed",
5
  "description": "Windows virtual machines should be monitored and secured through the deployed Azure Monitor Agent. The Azure Monitor Agent collects telemetry data from the guest OS. Windows virtual machines with supported OS and in supported regions are monitored for Azure Monitor Agent deployment. Learn more: https://aka.ms/AMAOverview.",
6
  "metadata": {
7
+ "version": "3.2.0",
8
  "category": "Monitoring"
9
  },
10
  "parameters": {
11
  "effect": {
 
51
  {
52
  "field": "location",
53
  "in": [
54
  "australiacentral",
55
+ "australiacentral2",
56
  "australiaeast",
57
  "australiasoutheast",
58
  "brazilsouth",
59
+ "brazilsoutheast",
60
  "canadacentral",
61
  "canadaeast",
62
  "centralindia",
63
  "centralus",
64
+ "centraluseuap",
65
  "eastasia",
 
66
  "eastus",
67
  "eastus2",
68
+ "eastus2euap",
69
  "francecentral",
70
+ "francesouth",
71
+ "germanynorth",
72
  "germanywestcentral",
73
+ "israelcentral",
74
+ "italynorth",
75
  "japaneast",
76
  "japanwest",
77
+ "jioindiacentral",
78
  "jioindiawest",
79
  "koreacentral",
80
  "koreasouth",
81
+ "malaysiasouth",
82
+ "mexicocentral",
83
  "northcentralus",
84
  "northeurope",
85
  "norwayeast",
86
+ "norwaywest",
87
+ "polandcentral",
88
+ "qatarcentral",
89
  "southafricanorth",
90
+ "southafricawest",
91
  "southcentralus",
92
  "southeastasia",
93
  "southindia",
94
+ "spaincentral",
95
+ "swedencentral",
96
+ "swedensouth",
97
  "switzerlandnorth",
98
+ "switzerlandwest",
99
+ "taiwannorth",
100
+ "taiwannorthwest",
101
+ "uaecentral",
102
  "uaenorth",
103
  "uksouth",
104
  "ukwest",
105
  "westcentralus",
106
  "westeurope",
107
  "westindia",
108
  "westus",
109
+ "westus2",
110
+ "westus3"
111
  ]
112
  },
113
  {
114
  "anyOf": [
JSON
api-version=2021-06-01
EPAC 
{7 items
  • displayName: "Windows virtual machines should have Azure Monitor Agent installed",
  • policyType: "BuiltIn",
  • mode: "Indexed",
  • description: "Windows virtual machines should be monitored and secured through the deployed Azure Monitor Agent. The Azure Monitor Agent collects telemetry data from the guest OS. Windows virtual machines with supported OS and in supported regions are monitored for Azure Monitor Agent deployment. Learn more: https://aka.ms/AMAOverview.",
  • metadata: {2 items
    • version: "3.2.0",
    • category: "Monitoring"
    },
  • parameters: {3 items
    • effect: {4 items},
    • scopeToSupportedImages: {4 items
      • type: "Boolean",
      • metadata: {2 items
        • displayName: "Scope Policy to Azure Monitor Agent-Supported Operating Systems",
        • description: "If set to true, the policy will apply only to virtual machines with supported operating systems. Otherwise, the policy will apply to all virtual machine resources in the assignment scope. For supported operating systems, see https://aka.ms/AMAOverview."
        },
      • allowedValues: [2 items
        • true,
        • false
        ],
      • defaultValue: true
      },
    • listOfWindowsImageIdToInclude: {3 items
      • type: "Array",
      • metadata: {2 items
        • displayName: "Additional Virtual Machine Images",
        • description: "List of virtual machine images that have supported Windows OS to add to scope. Example values: '/subscriptions/<subscriptionId>/resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'"
        },
      • defaultValue: []
      }
    },
  • policyRule: {2 items
    • if: {1 item
      • allOf: [3 items
        • {2 items
          • field: "type",
          • equals: "Microsoft.Compute/virtualMachines"
          },
        • {2 items
          • field: "location",
          • in: [57 items
            • "australiacentral",
            • "australiacentral2",
            • "australiaeast",
            • "australiasoutheast",
            • "brazilsouth",
            • "brazilsoutheast",
            • "canadacentral",
            • "canadaeast",
            • "centralindia",
            • "centralus",
            • "centraluseuap",
            • "eastasia",
            • "eastus",
            • "eastus2",
            • "eastus2euap",
            • "francecentral",
            • "francesouth",
            • "germanynorth",
            • "germanywestcentral",
            • "israelcentral",
            • "italynorth",
            • "japaneast",
            • "japanwest",
            • "jioindiacentral",
            • "jioindiawest",
            • "koreacentral",
            • "koreasouth",
            • "malaysiasouth",
            • "mexicocentral",
            • "northcentralus",
            • "northeurope",
            • "norwayeast",
            • "norwaywest",
            • "polandcentral",
            • "qatarcentral",
            • "southafricanorth",
            • "southafricawest",
            • "southcentralus",
            • "southeastasia",
            • "southindia",
            • "spaincentral",
            • "swedencentral",
            • "swedensouth",
            • "switzerlandnorth",
            • "switzerlandwest",
            • "taiwannorth",
            • "taiwannorthwest",
            • "uaecentral",
            • "uaenorth",
            • "uksouth",
            • "ukwest",
            • "westcentralus",
            • "westeurope",
            • "westindia",
            • "westus",
            • "westus2",
            • "westus3"
            ]
          },
        • {1 item
          • anyOf: [11 items
            • {1 item
              • allOf: [2 items
                • {2 items
                  • value: "[parameters('scopeToSupportedImages')]",
                  • equals: false
                  },
                • {2 items
                  • field: "Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType",
                  • like: "Windows*"
                  }
                ]
              },
            • {2 items
              • field: "Microsoft.Compute/imageId",
              • in: "[parameters('listOfWindowsImageIdToInclude')]"
              },
            • {1 item
              • allOf: [3 items
                • {2 items
                  • field: "Microsoft.Compute/imagePublisher",
                  • equals: "MicrosoftWindowsServer"
                  },
                • {2 items
                  • field: "Microsoft.Compute/imageOffer",
                  • equals: "WindowsServer"
                  },
                • {1 item
                  • anyOf: [5 items
                    • {2 items
                      • field: "Microsoft.Compute/imageSku",
                      • like: "2008-R2-SP1*"
                      },
                    • {2 items
                      • field: "Microsoft.Compute/imageSku",
                      • like: "2012-*"
                      },
                    • {2 items
                      • field: "Microsoft.Compute/imageSku",
                      • like: "2016-*"
                      },
                    • {2 items
                      • field: "Microsoft.Compute/imageSku",
                      • like: "2019-*"
                      },
                    • {2 items
                      • field: "Microsoft.Compute/imageSku",
                      • like: "2022-*"
                      }
                    ]
                  }
                ]
              },
            • {1 item
              • allOf: [3 items
                • {2 items
                  • field: "Microsoft.Compute/imagePublisher",
                  • equals: "MicrosoftWindowsServer"
                  },
                • {2 items
                  • field: "Microsoft.Compute/imageOffer",
                  • equals: "WindowsServerSemiAnnual"
                  },
                • {2 items
                  • field: "Microsoft.Compute/imageSKU",
                  • in: [3 items
                    • "Datacenter-Core-1709-smalldisk",
                    • "Datacenter-Core-1709-with-Containers-smalldisk",
                    • "Datacenter-Core-1803-with-Containers-smalldisk"
                    ]
                  }
                ]
              },
            • {1 item
              • allOf: [2 items
                • {2 items
                  • field: "Microsoft.Compute/imagePublisher",
                  • equals: "MicrosoftWindowsServerHPCPack"
                  },
                • {2 items
                  • field: "Microsoft.Compute/imageOffer",
                  • equals: "WindowsServerHPCPack"
                  }
                ]
              },
            • {1 item
              • allOf: [2 items
                • {2 items
                  • field: "Microsoft.Compute/imagePublisher",
                  • equals: "MicrosoftSQLServer"
                  },
                • {1 item
                  • anyOf: [8 items
                    • {2 items
                      • field: "Microsoft.Compute/imageOffer",
                      • like: "*-WS2022"
                      },
                    • {2 items
                      • field: "Microsoft.Compute/imageOffer",
                      • like: "*-WS2022-BYOL"
                      },
                    • {2 items
                      • field: "Microsoft.Compute/imageOffer",
                      • like: "*-WS2019"
                      },
                    • {2 items
                      • field: "Microsoft.Compute/imageOffer",
                      • like: "*-WS2019-BYOL"
                      },
                    • {2 items
                      • field: "Microsoft.Compute/imageOffer",
                      • like: "*-WS2016"
                      },
                    • {2 items
                      • field: "Microsoft.Compute/imageOffer",
                      • like: "*-WS2016-BYOL"
                      },
                    • {2 items
                      • field: "Microsoft.Compute/imageOffer",
                      • like: "*-WS2012R2"
                      },
                    • {2 items
                      • field: "Microsoft.Compute/imageOffer",
                      • like: "*-WS2012R2-BYOL"
                      }
                    ]
                  }
                ]
              },
            • {1 item
              • allOf: [2 items
                • {2 items
                  • field: "Microsoft.Compute/imagePublisher",
                  • equals: "MicrosoftRServer"
                  },
                • {2 items
                  • field: "Microsoft.Compute/imageOffer",
                  • equals: "MLServer-WS2016"
                  }
                ]
              },
            • {1 item},
            • {1 item
              • allOf: [3 items
                • {2 items
                  • field: "Microsoft.Compute/imagePublisher",
                  • equals: "MicrosoftDynamicsAX"
                  },
                • {2 items
                  • field: "Microsoft.Compute/imageOffer",
                  • equals: "Dynamics"
                  },
                • {2 items
                  • field: "Microsoft.Compute/imageSKU",
                  • equals: "Pre-Req-AX7-Onebox-U8"
                  }
                ]
              },
            • {1 item
              • allOf: [2 items
                • {2 items
                  • field: "Microsoft.Compute/imagePublisher",
                  • equals: "microsoft-ads"
                  },
                • {2 items
                  • field: "Microsoft.Compute/imageOffer",
                  • equals: "windows-data-science-vm"
                  }
                ]
              },
            • {1 item
              • allOf: [2 items
                • {2 items
                  • field: "Microsoft.Compute/imagePublisher",
                  • equals: "MicrosoftWindowsDesktop"
                  },
                • {2 items
                  • field: "Microsoft.Compute/imageOffer",
                  • equals: "Windows-10"
                  }
                ]
              }
            ]
          }
        ]
      },
    • then: {2 items
      • effect: "[parameters('effect')]",
      • details: {2 items
        • type: "Microsoft.Compute/virtualMachines/extensions",
        • existenceCondition: {1 item
          • allOf: [3 items
            • {2 items
              • field: "Microsoft.Compute/virtualMachines/extensions/type",
              • equals: "AzureMonitorWindowsAgent"
              },
            • {2 items
              • field: "Microsoft.Compute/virtualMachines/extensions/publisher",
              • equals: "Microsoft.Azure.Monitor"
              },
            • {2 items
              • field: "Microsoft.Compute/virtualMachines/extensions/provisioningState",
              • equals: "Succeeded"
              }
            ]
          }
        }
      }
    }
}