AzInitiativeAdvertizer

last sync: 2025-Oct-31 18:22:44 UTC

Enforce additional recommended guardrails for Key Vault

Azure Landing Zones (ALZ) Policy Initiative (PolicySet)

Source Repository Azure Landing Zones (ALZ) GitHub
JSON Enforce-Guardrails-KeyVault-Sup
Display nameEnforce additional recommended guardrails for Key Vault
IdEnforce-Guardrails-KeyVault-Sup
Version1.1.0
Details on versioning
CategoryKey Vault
DescriptionThis policy initiative is a group of policies that ensures Key Vault is compliant per regulated Landing Zones.
Cloud environments AzureChinaCloud
AzureCloud
AzureUSGovernment
TypeCustom Azure Landing Zones (ALZ)
DeprecatedFalse
PreviewFalse
Policy-used summary
Policy types Policy states Policy categories
Total Policies: 2
Builtin Policies: 2
Static Policies: 0
ALZ Policies: 0
GA: 1
Preview: 1
1 categories:
Key Vault: 2
Policy-used
Policy DisplayName Policy Id Category Effect Roles# Roles State Type policy in AzUSGov
[Preview]: Configure Azure Key Vault Managed HSM to disable public network access 84d327c3-164a-4685-b453-900478614456 Key Vault Default
Modify
Allowed
Modify, Disabled		 1 Managed HSM contributor Preview BuiltIn unknown
Configure key vaults to enable firewall ac673a9a-f77d-4846-b2d8-a57f8e1c01dc Key Vault Default
Modify
Allowed
Modify, Disabled		 1 Key Vault Contributor GA BuiltIn true
Roles used
Total Roles usage: 2
Total Roles unique usage: 2
Role Role Id #Policies Policies
Managed HSM contributor 18500a29-7fe2-46b2-a342-b16a415e101d 1 [Preview]: Configure Azure Key Vault Managed HSM to disable public network access
Key Vault Contributor f25e0fa2-a7c8-4377-a976-54943a77a395 1 Configure key vaults to enable firewall
History none
JSON compare n/a
JSON
EPAC