AzPolicyAdvertizer

last sync: 2025-Jun-20 17:23:43 UTC

Microsoft Managed Control 1220 - Least Functionality | Authorized Software / Whitelisting | Regulatory Compliance - Configuration Management

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1220 - Least Functionality | Authorized Software / Whitelisting
Id c40f31a7-81e1-4130-99e5-a02ceea2a1d6
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 0
Built-in Versioning [Preview]
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this Configuration Management control
Cloud environments AzureCloud = true
AzureUSGovernment = true
AzureChinaCloud = unknown
Available in AzUSGov The Policy is available in AzureUSGovernment cloud. Version: '1.0.0'
Repository: Azure-Policy c40f31a7-81e1-4130-99e5-a02ceea2a1d6
Additional metadata Name/Id: ACF1220 / Microsoft Managed Control 1220
Category: Configuration Management
Title: Least Functionality | Authorized Software / Whitelisting - Policy
Ownership: Customer, Microsoft
Description: The organization: Employs a deny-all, permit-by-exception policy to allow the execution of authorized software programs on the information system; and
Requirements: Azure employs a deny-by-default, permit-by-exception software policy. Any changes to baselines or configuration scripts must be reviewed and approved by the appropriate change review committee.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Compliance
The following 2 compliance controls are associated with this Policy definition 'Microsoft Managed Control 1220 - Least Functionality | Authorized Software / Whitelisting' (c40f31a7-81e1-4130-99e5-a02ceea2a1d6)
Loading extensions...Loading extensions...
Rows: 1-2 / 2

Columns:

Close

Columns▼Records:
Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, [empty], [nonempty], rgx:
Learn more

TableFilter v0.7.3

https://www.tablefilter.com/
©2015-2025 Max Guglielmi
?
Page of 1
Control Domain Control Name MetadataId Category Title Owner Requirements Description Info Policy#
op.exp.2 Security configuration op.exp.2 Security configuration 404 not found n/a n/a 112
op.exp.3 Security configuration management op.exp.3 Security configuration management 404 not found n/a n/a 123
Initiatives usage
Rows: 1-1 / 1
Records:
Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, [empty], [nonempty], rgx:
Learn more

TableFilter v0.7.3

https://www.tablefilter.com/
©2015-2025 Max Guglielmi
?
Page of 1
Initiative DisplayName Initiative Id Initiative Category State Type polSet in AzUSGov
Spain ENS 175daf90-21e1-4fec-b745-7b4c909aa94c Regulatory Compliance GA BuiltIn unknown
History none
JSON compare n/a
JSON
api-version=2021-06-01
EPAC 
{6 items
  • displayName: "Microsoft Managed Control 1220 - Least Functionality | Authorized Software / Whitelisting",
  • policyType: "Static",
  • mode: "Indexed",
  • description: "Microsoft implements this Configuration Management control",
  • metadata: {3 items
    • version: "1.0.0",
    • category: "Regulatory Compliance",
    • additionalMetadataId: "/providers/Microsoft.PolicyInsights/policyMetadata/ACF1220"
    },
  • policyRule: {2 items}
}