Audit Linux machines that don't have the specified applications installed

Azure BuiltIn Policy definition

Alias

Namespace

ResourceType

Path

PathIsDefault

DefaultPath

Modifiable

Microsoft.Compute/imageOffer

Microsoft.Compute
Microsoft.Compute
Microsoft.Compute

virtualMachines
virtualMachineScaleSets
disks

properties.storageProfile.imageReference.offer
properties.virtualMachineProfile.storageProfile.imageReference.offer
properties.creationData.imageReference.id

True
True
True

False
False
False

Microsoft.Compute/imagePublisher

Microsoft.Compute
Microsoft.Compute
Microsoft.Compute

virtualMachines
virtualMachineScaleSets
disks

properties.storageProfile.imageReference.publisher
properties.virtualMachineProfile.storageProfile.imageReference.publisher
properties.creationData.imageReference.id

True
True
True

False
False
False

Microsoft.Compute/imageSKU

Microsoft.Compute
Microsoft.Compute
Microsoft.Compute

virtualMachines
virtualMachineScaleSets
disks

properties.storageProfile.imageReference.sku
properties.virtualMachineProfile.storageProfile.imageReference.sku
properties.creationData.imageReference.id

True
True
True

False
False
False

Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration

Microsoft.Compute

virtualMachines

properties.osProfile.linuxConfiguration

True

Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType

Microsoft.Compute

virtualMachines

properties.storageProfile.osDisk.osType

True

Microsoft.ConnectedVMwarevSphere/virtualMachines/osProfile.osType

Microsoft.ConnectedVMwarevSphere

virtualmachines

properties.osProfile.osType

True

False

Microsoft.HybridCompute/imageOffer

Microsoft.HybridCompute

machines

properties.osName

True

False

Alias

Namespace

ResourceType

Path

PathIsDefault

DefaultPath

Modifiable

Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus

Microsoft.GuestConfiguration

guestConfigurationAssignments

properties.complianceStatus

True

False

Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash

Microsoft.GuestConfiguration

guestConfigurationAssignments

properties.parameterHash

True

False

Rows: 1-1 / 1

Records:

Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, [empty], [nonempty], rgx:
Learn more

TableFilter v0.7.3

https://www.tablefilter.com/
©2015-2025 Max Guglielmi

Page of 1

Initiative DisplayName

Initiative Id

Initiative Category

State

Type

polSet in AzUSGov

[Preview]: Motion Picture Association of America (MPAA)

92646f03-e39d-47a9-9e24-58d60ef49af8

Regulatory Compliance

Preview

BuiltIn

unknown

Date/Time (UTC ymd) (i)

Change type

Change detail

2024-01-22 17:47:54

change

Minor (4.1.0 > 4.2.0)

2023-08-03 17:56:09

change

Minor (4.0.0 > 4.1.0)

2022-01-28 17:51:01

change

Major (3.1.0 > 4.0.0)

2021-12-06 22:17:57

change

Minor (3.0.0 > 3.1.0)

2020-10-27 14:12:45

change

Major (2.0.0 > 3.0.0)

2020-09-09 11:24:03

add

d3b823c9-e0fc-4453-9fb2-8213b7338523

{

displayName: "Audit Linux machines that don't have the specified applications installed",
policyType: "BuiltIn",
mode: "Indexed",
description: "Requires that prerequisites are deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol. Machines are non-compliant if the Chef InSpec resource indicates that one or more of the packages provided by the parameter are not installed.",
metadata: {4 items
- version: "4.2.0",
- category: "Guest Configuration",
- requiredProviders: [1 item
  - "Microsoft.GuestConfiguration"
  ],
- guestConfiguration: {3 items
  - name: "installed_application_linux",
  - version: "1.*",
  - configurationParameter: {1 item
    - ApplicationName: "[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent"
    }
  }
},
parameters: {3 items
- IncludeArcMachines: {4 items
  - type: "String",
  - metadata: {3 items
    - displayName: "Include Arc connected servers",
    - description: "By selecting this option, you agree to be charged monthly per Arc connected machine.",
    - portalReview: "true"
    },
  - allowedValues: [2 items
    - "true",
    - "false"
    ],
  - defaultValue: "false"
  },
- ApplicationName: {2 items
  - type: "String",
  - metadata: {2 items
    - displayName: "Application names",
    - description: "A semicolon-separated list of the names of the applications that should be installed. e.g. 'python; powershell'"
    }
  },
- effect: {4 items
  - type: "String",
  - metadata: {2 items
    - displayName: "Effect",
    - description: "Enable or disable the execution of this policy"
    },
  - allowedValues: [2 items
    - "AuditIfNotExists",
    - "Disabled"
    ],
  - defaultValue: "AuditIfNotExists"
  }
},
policyRule: {2 items
- if: {1 item
  - anyOf: [2 items
    - {1 item
      - allOf: [2 items
        {2 items
        field: "type",
        equals: "Microsoft.Compute/virtualMachines"
        },
        {1 item
        anyOf: [11 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        in: [9 items
        "microsoft-aks",
        "qubole-inc",
        "datastax",
        "couchbase",
        "scalegrid",
        "checkpoint",
        "paloaltonetworks",
        "debian",
        "credativ"
        ]
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        equals: "OpenLogic"
        },
        {2 items
        field: "Microsoft.Compute/imageSKU",
        notLike: "6*"
        }
        ]
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        equals: "Oracle"
        },
        {2 items
        field: "Microsoft.Compute/imageSKU",
        notLike: "6*"
        }
        ]
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        equals: "RedHat"
        },
        {2 items
        field: "Microsoft.Compute/imageSKU",
        notLike: "6*"
        }
        ]
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        equals: "center-for-internet-security-inc"
        },
        {2 items
        field: "Microsoft.Compute/imageOffer",
        notLike: "cis-win*"
        }
        ]
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        equals: "Suse"
        },
        {2 items
        field: "Microsoft.Compute/imageSKU",
        notLike: "11*"
        }
        ]
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        equals: "Canonical"
        },
        {2 items
        field: "Microsoft.Compute/imageSKU",
        notLike: "12*"
        }
        ]
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        equals: "microsoft-dsvm"
        },
        {2 items
        field: "Microsoft.Compute/imageOffer",
        notLike: "dsvm-win*"
        }
        ]
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        equals: "cloudera"
        },
        {2 items
        field: "Microsoft.Compute/imageSKU",
        notLike: "6*"
        }
        ]
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        equals: "microsoft-ads"
        },
        {2 items
        field: "Microsoft.Compute/imageOffer",
        like: "linux*"
        }
        ]
        },
        {1 item
        allOf: [2 items
        {1 item
        anyOf: [2 items
        {2 items
        field: "Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration",
        exists: "true"
        },
        {2 items
        field: "Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType",
        like: "Linux*"
        }
        ]
        },
        {1 item
        anyOf: [2 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        exists: "false"
        },
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        notIn: [12 items
        "OpenLogic",
        "RedHat",
        "credativ",
        "Suse",
        "Canonical",
        "microsoft-dsvm",
        "cloudera",
        "microsoft-ads",
        "center-for-internet-security-inc",
        "Oracle",
        "AzureDatabricks",
        "azureopenshift"
        ]
        }
        ]
        }
        ]
        }
        ]
        }
        ]
      },
    - {1 item
      - allOf: [2 items
        {2 items
        value: "[parameters('IncludeArcMachines')]",
        equals: "true"
        },
        {1 item
        anyOf: [2 items
        {1 item
        allOf: [2 items
        {2 items
        field: "type",
        equals: "Microsoft.HybridCompute/machines"
        },
        {2 items
        field: "Microsoft.HybridCompute/imageOffer",
        like: "linux*"
        }
        ]
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "type",
        equals: "Microsoft.ConnectedVMwarevSphere/virtualMachines"
        },
        {2 items
        field: "Microsoft.ConnectedVMwarevSphere/virtualMachines/osProfile.osType",
        like: "linux*"
        }
        ]
        }
        ]
        }
        ]
      }
    ]
  },
- then: {2 items
  - effect: "[parameters('effect')]",
  - details: {3 items
    - type: "Microsoft.GuestConfiguration/guestConfigurationAssignments",
    - name: "installed_application_linux",
    - existenceCondition: {1 item
      - allOf: [2 items
        {2 items
        field: "Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus",
        equals: "Compliant"
        },
        {2 items
        field: "Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash",
        equals: 🔍"[ base64( concat( '[ ChefInSpec ]InstalledApplicationLinuxResource1;AttributesYmlContent', '=', parameters('ApplicationName') ) ) ]"
        }
        ]
      }
    }
  }
}

}