standard
turbot/azure_compliance

Variables

The Azure Compliance mod has 344 variables:

approvers

Name
approvers
Description
List of notifiers to be used for obtaining action/approval decisions, when empty list will perform the default response associated with the detection.
Type
list(notifier)
Default
notifier.default

appservice_web_apps_register_with_active_directory_disabled_default_action

Name
appservice_web_apps_register_with_active_directory_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

appservice_web_apps_register_with_active_directory_disabled_enabled_actions

Name
appservice_web_apps_register_with_active_directory_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"register_active_directory"
]

appservice_web_apps_register_with_active_directory_disabled_trigger_enabled

Name
appservice_web_apps_register_with_active_directory_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

appservice_web_apps_register_with_active_directory_disabled_trigger_schedule

Name
appservice_web_apps_register_with_active_directory_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

appservice_web_apps_with_authentication_disabled_default_action

Name
appservice_web_apps_with_authentication_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

appservice_web_apps_with_authentication_disabled_enabled_actions

Name
appservice_web_apps_with_authentication_disabled_enabled_actions
Description
The list of enabled actions approvers can select
Type
list(string)
Default
[
"skip",
"enable_web_app_authentication"
]

appservice_web_apps_with_authentication_disabled_trigger_enabled

Name
appservice_web_apps_with_authentication_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

appservice_web_apps_with_authentication_disabled_trigger_schedule

Name
appservice_web_apps_with_authentication_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

appservice_web_apps_with_ftp_deployment_enabled_default_action

Name
appservice_web_apps_with_ftp_deployment_enabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

appservice_web_apps_with_ftp_deployment_enabled_enabled_actions

Name
appservice_web_apps_with_ftp_deployment_enabled_enabled_actions
Description
The list of enabled actions approvers can select.
Type
list(string)
Default
[
"skip",
"disable_ftp_deployment"
]

appservice_web_apps_with_ftp_deployment_enabled_trigger_enabled

Name
appservice_web_apps_with_ftp_deployment_enabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

appservice_web_apps_with_ftp_deployment_enabled_trigger_schedule

Name
appservice_web_apps_with_ftp_deployment_enabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

appservice_web_apps_with_remote_debugging_enabled_default_action

Name
appservice_web_apps_with_remote_debugging_enabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

appservice_web_apps_with_remote_debugging_enabled_enabled_actions

Name
appservice_web_apps_with_remote_debugging_enabled_enabled_actions
Description
The list of enabled actions approvers can select
Type
list(string)
Default
[
"skip",
"disable_remote_debugging"
]

appservice_web_apps_with_remote_debugging_enabled_trigger_enabled

Name
appservice_web_apps_with_remote_debugging_enabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

appservice_web_apps_with_remote_debugging_enabled_trigger_schedule

Name
appservice_web_apps_with_remote_debugging_enabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

appservice_web_apps_without_https_enabled_default_action

Name
appservice_web_apps_without_https_enabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

appservice_web_apps_without_https_enabled_enabled_actions

Name
appservice_web_apps_without_https_enabled_enabled_actions
Description
The list of enabled actions approvers can select.
Type
list(string)
Default
[
"skip",
"enable_https"
]

appservice_web_apps_without_https_enabled_trigger_enabled

Name
appservice_web_apps_without_https_enabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

appservice_web_apps_without_https_enabled_trigger_schedule

Name
appservice_web_apps_without_https_enabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

appservice_web_apps_without_latest_http_version_default_action

Name
appservice_web_apps_without_latest_http_version_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

appservice_web_apps_without_latest_http_version_enabled_actions

Name
appservice_web_apps_without_latest_http_version_enabled_actions
Description
The list of enabled actions approvers can select.
Type
list(string)
Default
[
"skip",
"enable_latest_http_version"
]

appservice_web_apps_without_latest_http_version_trigger_enabled

Name
appservice_web_apps_without_latest_http_version_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

appservice_web_apps_without_latest_http_version_trigger_schedule

Name
appservice_web_apps_without_latest_http_version_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

appservice_web_apps_without_latest_php_version_default_action

Name
appservice_web_apps_without_latest_php_version_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

appservice_web_apps_without_latest_php_version_enabled_actions

Name
appservice_web_apps_without_latest_php_version_enabled_actions
Description
The list of enabled actions approvers can select.
Type
list(string)
Default
[
"skip",
"enable_latest_php_version"
]

appservice_web_apps_without_latest_php_version_linux_fx_version

Name
appservice_web_apps_without_latest_php_version_linux_fx_version
Description
The linux fx version for App Service web app.
Type
string
Default
PHP|8.3

appservice_web_apps_without_latest_php_version_trigger_enabled

Name
appservice_web_apps_without_latest_php_version_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

appservice_web_apps_without_latest_php_version_trigger_schedule

Name
appservice_web_apps_without_latest_php_version_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

appservice_web_apps_without_latest_python_version_default_action

Name
appservice_web_apps_without_latest_python_version_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

appservice_web_apps_without_latest_python_version_enabled_actions

Name
appservice_web_apps_without_latest_python_version_enabled_actions
Description
The list of enabled actions approvers can select.
Type
list(string)
Default
[
"skip",
"enable_latest_python_version"
]

appservice_web_apps_without_latest_python_version_linux_fx_version

Name
appservice_web_apps_without_latest_python_version_linux_fx_version
Description
The linux fx version for App Service web app.
Type
string
Default
PYTHON|3.12

appservice_web_apps_without_latest_python_version_python_version

Name
appservice_web_apps_without_latest_python_version_python_version
Description
The python version for App Service web app.
Type
string
Default
3.12

appservice_web_apps_without_latest_python_version_trigger_enabled

Name
appservice_web_apps_without_latest_python_version_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

appservice_web_apps_without_latest_python_version_trigger_schedule

Name
appservice_web_apps_without_latest_python_version_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

appservice_web_apps_without_latest_tls_version_default_action

Name
appservice_web_apps_without_latest_tls_version_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

appservice_web_apps_without_latest_tls_version_enabled_actions

Name
appservice_web_apps_without_latest_tls_version_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_latest_tls_version"
]

appservice_web_apps_without_latest_tls_version_trigger_enabled

Name
appservice_web_apps_without_latest_tls_version_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

appservice_web_apps_without_latest_tls_version_trigger_schedule

Name
appservice_web_apps_without_latest_tls_version_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

compute_attached_disks_not_encrypted_with_cmk_trigger_enabled

Name
compute_attached_disks_not_encrypted_with_cmk_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

compute_attached_disks_not_encrypted_with_cmk_trigger_schedule

Name
compute_attached_disks_not_encrypted_with_cmk_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

compute_disks_with_data_access_auth_mode_disabled_default_action

Name
compute_disks_with_data_access_auth_mode_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

compute_disks_with_data_access_auth_mode_disabled_enabled_actions

Name
compute_disks_with_data_access_auth_mode_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_data_access_auth_mode"
]

compute_disks_with_data_access_auth_mode_disabled_trigger_enabled

Name
compute_disks_with_data_access_auth_mode_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

compute_disks_with_data_access_auth_mode_disabled_trigger_schedule

Name
compute_disks_with_data_access_auth_mode_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

compute_disks_with_public_access_enabled_trigger_enabled

Name
compute_disks_with_public_access_enabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

compute_disks_with_public_access_enabled_trigger_schedule

Name
compute_disks_with_public_access_enabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

compute_unattached_disks_not_encrypted_with_cmk_trigger_enabled

Name
compute_unattached_disks_not_encrypted_with_cmk_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

compute_unattached_disks_not_encrypted_with_cmk_trigger_schedule

Name
compute_unattached_disks_not_encrypted_with_cmk_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

compute_vms_without_managed_disk_trigger_enabled

Name
compute_vms_without_managed_disk_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

compute_vms_without_managed_disk_trigger_schedule

Name
compute_vms_without_managed_disk_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

cosmosdb_accounts_with_virtual_network_filter_disabled_trigger_enabled

Name
cosmosdb_accounts_with_virtual_network_filter_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

cosmosdb_accounts_with_virtual_network_filter_disabled_trigger_schedule

Name
cosmosdb_accounts_with_virtual_network_filter_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m
Name
cosmosdb_accounts_without_private_link_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false
Name
cosmosdb_accounts_without_private_link_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

database

Name
database
Description
Steampipe database connection string.
Type
connection.steampipe
Default
connection.steampipe.default

iam_authorization_policies_allowing_to_create_security_group_trigger_enabled

Name
iam_authorization_policies_allowing_to_create_security_group_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

iam_authorization_policies_allowing_to_create_security_group_trigger_schedule

Name
iam_authorization_policies_allowing_to_create_security_group_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

iam_authorization_policies_allowing_to_register_application_trigger_enabled

Name
iam_authorization_policies_allowing_to_register_application_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

iam_authorization_policies_allowing_to_register_application_trigger_schedule

Name
iam_authorization_policies_allowing_to_register_application_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

iam_conditional_access_with_mfa_disabled_for_administrators_trigger_enabled

Name
iam_conditional_access_with_mfa_disabled_for_administrators_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

iam_conditional_access_with_mfa_disabled_for_administrators_trigger_schedule

Name
iam_conditional_access_with_mfa_disabled_for_administrators_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

iam_conditional_access_with_mfa_disabled_trigger_enabled

Name
iam_conditional_access_with_mfa_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

iam_conditional_access_with_mfa_disabled_trigger_schedule

Name
iam_conditional_access_with_mfa_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

iam_subscriptions_with_custom_owner_roles_default_action

Name
iam_subscriptions_with_custom_owner_roles_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

iam_subscriptions_with_custom_owner_roles_enabled_actions

Name
iam_subscriptions_with_custom_owner_roles_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"delete_role"
]

iam_subscriptions_with_custom_owner_roles_trigger_enabled

Name
iam_subscriptions_with_custom_owner_roles_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

iam_subscriptions_with_custom_owner_roles_trigger_schedule

Name
iam_subscriptions_with_custom_owner_roles_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

keyvault_vaults_with_logging_disabled_trigger_enabled

Name
keyvault_vaults_with_logging_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

keyvault_vaults_with_logging_disabled_trigger_schedule

Name
keyvault_vaults_with_logging_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

keyvault_vaults_with_purge_protection_disabled_default_action

Name
keyvault_vaults_with_purge_protection_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

keyvault_vaults_with_purge_protection_disabled_enabled_actions

Name
keyvault_vaults_with_purge_protection_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_purge_protection"
]

keyvault_vaults_with_purge_protection_disabled_trigger_enabled

Name
keyvault_vaults_with_purge_protection_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

keyvault_vaults_with_purge_protection_disabled_trigger_schedule

Name
keyvault_vaults_with_purge_protection_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

keyvault_vaults_with_rbac_disabled_default_action

Name
keyvault_vaults_with_rbac_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

keyvault_vaults_with_rbac_disabled_enabled_actions

Name
keyvault_vaults_with_rbac_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_rbac"
]

keyvault_vaults_with_rbac_disabled_trigger_enabled

Name
keyvault_vaults_with_rbac_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

keyvault_vaults_with_rbac_disabled_trigger_schedule

Name
keyvault_vaults_with_rbac_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m
Name
keyvault_vaults_without_private_link_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false
Name
keyvault_vaults_without_private_link_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

keyvault_with_non_rbac_keys_expiration_not_set_trigger_enabled

Name
keyvault_with_non_rbac_keys_expiration_not_set_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

keyvault_with_non_rbac_keys_expiration_not_set_trigger_schedule

Name
keyvault_with_non_rbac_keys_expiration_not_set_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

keyvault_with_non_rbac_secrets_expiration_not_set_trigger_enabled

Name
keyvault_with_non_rbac_secrets_expiration_not_set_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

keyvault_with_non_rbac_secrets_expiration_not_set_trigger_schedule

Name
keyvault_with_non_rbac_secrets_expiration_not_set_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

keyvault_with_rbac_keys_expiration_not_set_trigger_enabled

Name
keyvault_with_rbac_keys_expiration_not_set_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

keyvault_with_rbac_keys_expiration_not_set_trigger_schedule

Name
keyvault_with_rbac_keys_expiration_not_set_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

keyvault_with_rbac_secrets_expiration_not_set_trigger_enabled

Name
keyvault_with_rbac_secrets_expiration_not_set_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

keyvault_with_rbac_secrets_expiration_not_set_trigger_schedule

Name
keyvault_with_rbac_secrets_expiration_not_set_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

max_concurrency

Name
max_concurrency
Description
The maximum concurrency to use for responding to detection items.
Type
number
Default
1

monitor_storage_containers_insights_activity_logs_not_encrypted_with_cmk_trigger_enabled

Name
monitor_storage_containers_insights_activity_logs_not_encrypted_with_cmk_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

monitor_storage_containers_insights_activity_logs_not_encrypted_with_cmk_trigger_schedule

Name
monitor_storage_containers_insights_activity_logs_not_encrypted_with_cmk_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

mysql_flexible_servers_with_audit_log_disabled_default_action

Name
mysql_flexible_servers_with_audit_log_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
notify, skip, enable_audit_log
Default
notify

mysql_flexible_servers_with_audit_log_disabled_enabled_actions

Name
mysql_flexible_servers_with_audit_log_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
skip, enable_audit_log
Default
[
"skip",
"enable_audit_log"
]

mysql_flexible_servers_with_audit_log_disabled_trigger_enabled

Name
mysql_flexible_servers_with_audit_log_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

mysql_flexible_servers_with_audit_log_disabled_trigger_schedule

Name
mysql_flexible_servers_with_audit_log_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

mysql_flexible_servers_with_audit_log_events_connection_not_set_default_action

Name
mysql_flexible_servers_with_audit_log_events_connection_not_set_default_action
Description
The default action to use when there are no approvers.
Type
string
notify, skip, set_audit_log_events_connection
Default
notify

mysql_flexible_servers_with_audit_log_events_connection_not_set_enabled_actions

Name
mysql_flexible_servers_with_audit_log_events_connection_not_set_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
skip, set_audit_log_events_connection
Default
[
"skip",
"set_audit_log_events_connection"
]

mysql_flexible_servers_with_audit_log_events_connection_not_set_trigger_enabled

Name
mysql_flexible_servers_with_audit_log_events_connection_not_set_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

mysql_flexible_servers_with_audit_log_events_connection_not_set_trigger_schedule

Name
mysql_flexible_servers_with_audit_log_events_connection_not_set_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

mysql_flexible_servers_with_ssl_disabled_default_action

Name
mysql_flexible_servers_with_ssl_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
notify, skip, set_parameter_require_secure_transport
Default
notify

mysql_flexible_servers_with_ssl_disabled_enabled_actions

Name
mysql_flexible_servers_with_ssl_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
skip, set_parameter_require_secure_transport
Default
[
"skip",
"set_parameter_require_secure_transport"
]

mysql_flexible_servers_with_ssl_disabled_trigger_enabled

Name
mysql_flexible_servers_with_ssl_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

mysql_flexible_servers_with_ssl_disabled_trigger_schedule

Name
mysql_flexible_servers_with_ssl_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

mysql_flexible_servers_without_min_tls_1_2_default_action

Name
mysql_flexible_servers_without_min_tls_1_2_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

mysql_flexible_servers_without_min_tls_1_2_enabled_actions

Name
mysql_flexible_servers_without_min_tls_1_2_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_min_tls_1_2"
]

mysql_flexible_servers_without_min_tls_1_2_trigger_enabled

Name
mysql_flexible_servers_without_min_tls_1_2_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

mysql_flexible_servers_without_min_tls_1_2_trigger_schedule

Name
mysql_flexible_servers_without_min_tls_1_2_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

network_lbs_with_basic_sku_trigger_enabled

Name
network_lbs_with_basic_sku_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

network_lbs_with_basic_sku_trigger_schedule

Name
network_lbs_with_basic_sku_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

network_public_ips_with_basic_sku_trigger_enabled

Name
network_public_ips_with_basic_sku_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

network_public_ips_with_basic_sku_trigger_schedule

Name
network_public_ips_with_basic_sku_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

network_security_groups_allowing_inbound_to_https_port_default_action

Name
network_security_groups_allowing_inbound_to_https_port_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

network_security_groups_allowing_inbound_to_https_port_enabled_actions

Name
network_security_groups_allowing_inbound_to_https_port_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"revoke_nsg_rule"
]

network_security_groups_allowing_inbound_to_https_port_trigger_enabled

Name
network_security_groups_allowing_inbound_to_https_port_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

network_security_groups_allowing_inbound_to_https_port_trigger_schedule

Name
network_security_groups_allowing_inbound_to_https_port_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

network_security_groups_allowing_inbound_to_rdp_port_default_action

Name
network_security_groups_allowing_inbound_to_rdp_port_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

network_security_groups_allowing_inbound_to_rdp_port_enabled_actions

Name
network_security_groups_allowing_inbound_to_rdp_port_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"revoke_nsg_rule"
]

network_security_groups_allowing_inbound_to_rdp_port_trigger_enabled

Name
network_security_groups_allowing_inbound_to_rdp_port_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

network_security_groups_allowing_inbound_to_rdp_port_trigger_schedule

Name
network_security_groups_allowing_inbound_to_rdp_port_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

network_security_groups_allowing_inbound_to_ssh_port_default_action

Name
network_security_groups_allowing_inbound_to_ssh_port_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

network_security_groups_allowing_inbound_to_ssh_port_enabled_actions

Name
network_security_groups_allowing_inbound_to_ssh_port_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"revoke_nsg_rule"
]

network_security_groups_allowing_inbound_to_ssh_port_trigger_enabled

Name
network_security_groups_allowing_inbound_to_ssh_port_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

network_security_groups_allowing_inbound_to_ssh_port_trigger_schedule

Name
network_security_groups_allowing_inbound_to_ssh_port_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

network_security_groups_allowing_inbound_to_udp_port_default_action

Name
network_security_groups_allowing_inbound_to_udp_port_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

network_security_groups_allowing_inbound_to_udp_port_enabled_actions

Name
network_security_groups_allowing_inbound_to_udp_port_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"revoke_nsg_rule"
]

network_security_groups_allowing_inbound_to_udp_port_trigger_enabled

Name
network_security_groups_allowing_inbound_to_udp_port_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

network_security_groups_allowing_inbound_to_udp_port_trigger_schedule

Name
network_security_groups_allowing_inbound_to_udp_port_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

network_security_groups_flow_log_with_retention_period_less_than_90_days_trigger_enabled

Name
network_security_groups_flow_log_with_retention_period_less_than_90_days_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

network_security_groups_flow_log_with_retention_period_less_than_90_days_trigger_schedule

Name
network_security_groups_flow_log_with_retention_period_less_than_90_days_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

network_watcher_disabled_in_regions_trigger_enabled

Name
network_watcher_disabled_in_regions_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

network_watcher_disabled_in_regions_trigger_schedule

Name
network_watcher_disabled_in_regions_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

notification_level

Name
notification_level
Description
The verbosity level of notification messages to send.
Type
string
Default
info

notifier

Name
notifier
Description
The notifier to use for sending notification messages.
Type
notifier
Default
notifier.default

postgresql_flexible_servers_log_retention_days_less_than_or_equal_to_3_days_default_action

Name
postgresql_flexible_servers_log_retention_days_less_than_or_equal_to_3_days_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

postgresql_flexible_servers_log_retention_days_less_than_or_equal_to_3_days_enabled_actions

Name
postgresql_flexible_servers_log_retention_days_less_than_or_equal_to_3_days_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"update_log_retention_days"
]

postgresql_flexible_servers_log_retention_days_less_than_or_equal_to_3_days_log_retention_days

Name
postgresql_flexible_servers_log_retention_days_less_than_or_equal_to_3_days_log_retention_days
Description
The number of days logs should be retained.
Type
string
Default
7

postgresql_flexible_servers_log_retention_days_less_than_or_equal_to_3_days_trigger_enabled

Name
postgresql_flexible_servers_log_retention_days_less_than_or_equal_to_3_days_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

postgresql_flexible_servers_log_retention_days_less_than_or_equal_to_3_days_trigger_schedule

Name
postgresql_flexible_servers_log_retention_days_less_than_or_equal_to_3_days_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

postgresql_flexible_servers_with_connection_throttling_disabled_default_action

Name
postgresql_flexible_servers_with_connection_throttling_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

postgresql_flexible_servers_with_connection_throttling_disabled_enabled_actions

Name
postgresql_flexible_servers_with_connection_throttling_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_connection_throttling"
]

postgresql_flexible_servers_with_connection_throttling_disabled_trigger_enabled

Name
postgresql_flexible_servers_with_connection_throttling_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

postgresql_flexible_servers_with_connection_throttling_disabled_trigger_schedule

Name
postgresql_flexible_servers_with_connection_throttling_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

postgresql_flexible_servers_with_log_checkpoints_disabled_default_action

Name
postgresql_flexible_servers_with_log_checkpoints_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

postgresql_flexible_servers_with_log_checkpoints_disabled_enabled_actions

Name
postgresql_flexible_servers_with_log_checkpoints_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_log_checkpoints"
]

postgresql_flexible_servers_with_log_checkpoints_disabled_trigger_enabled

Name
postgresql_flexible_servers_with_log_checkpoints_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

postgresql_flexible_servers_with_log_checkpoints_disabled_trigger_schedule

Name
postgresql_flexible_servers_with_log_checkpoints_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

postgresql_flexible_servers_with_ssl_disabled_default_action

Name
postgresql_flexible_servers_with_ssl_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
notify, skip, set_parameter_require_secure_transport
Default
notify

postgresql_flexible_servers_with_ssl_disabled_enabled_actions

Name
postgresql_flexible_servers_with_ssl_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
skip, set_parameter_require_secure_transport
Default
[
"skip",
"set_parameter_require_secure_transport"
]

postgresql_flexible_servers_with_ssl_disabled_trigger_enabled

Name
postgresql_flexible_servers_with_ssl_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

postgresql_flexible_servers_with_ssl_disabled_trigger_schedule

Name
postgresql_flexible_servers_with_ssl_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

postgresql_servers_with_allow_access_to_azure_services_enabled_default_action

Name
postgresql_servers_with_allow_access_to_azure_services_enabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

postgresql_servers_with_allow_access_to_azure_services_enabled_enabled_actions

Name
postgresql_servers_with_allow_access_to_azure_services_enabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"delete_allow_all_windows_azure_ips_firewall_rule"
]

postgresql_servers_with_allow_access_to_azure_services_enabled_trigger_enabled

Name
postgresql_servers_with_allow_access_to_azure_services_enabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

postgresql_servers_with_allow_access_to_azure_services_enabled_trigger_schedule

Name
postgresql_servers_with_allow_access_to_azure_services_enabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

postgresql_servers_with_connection_throttling_disabled_default_action

Name
postgresql_servers_with_connection_throttling_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

postgresql_servers_with_connection_throttling_disabled_enabled_actions

Name
postgresql_servers_with_connection_throttling_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_connection_throttling"
]

postgresql_servers_with_connection_throttling_disabled_trigger_enabled

Name
postgresql_servers_with_connection_throttling_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

postgresql_servers_with_connection_throttling_disabled_trigger_schedule

Name
postgresql_servers_with_connection_throttling_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

postgresql_servers_with_infrastructure_encryption_disabled_trigger_enabled

Name
postgresql_servers_with_infrastructure_encryption_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

postgresql_servers_with_infrastructure_encryption_disabled_trigger_schedule

Name
postgresql_servers_with_infrastructure_encryption_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

postgresql_servers_with_log_checkpoints_disabled_default_action

Name
postgresql_servers_with_log_checkpoints_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

postgresql_servers_with_log_checkpoints_disabled_enabled_actions

Name
postgresql_servers_with_log_checkpoints_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_log_checkpoints"
]

postgresql_servers_with_log_checkpoints_disabled_trigger_enabled

Name
postgresql_servers_with_log_checkpoints_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

postgresql_servers_with_log_checkpoints_disabled_trigger_schedule

Name
postgresql_servers_with_log_checkpoints_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

postgresql_servers_with_log_connections_disabled_default_action

Name
postgresql_servers_with_log_connections_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

postgresql_servers_with_log_connections_disabled_enabled_actions

Name
postgresql_servers_with_log_connections_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_logging_connections"
]

postgresql_servers_with_log_connections_disabled_trigger_enabled

Name
postgresql_servers_with_log_connections_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

postgresql_servers_with_log_connections_disabled_trigger_schedule

Name
postgresql_servers_with_log_connections_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

postgresql_servers_with_log_disconnections_disabled_default_action

Name
postgresql_servers_with_log_disconnections_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

postgresql_servers_with_log_disconnections_disabled_enabled_actions

Name
postgresql_servers_with_log_disconnections_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_logging_disconnections"
]

postgresql_servers_with_log_disconnections_disabled_trigger_enabled

Name
postgresql_servers_with_log_disconnections_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

postgresql_servers_with_log_disconnections_disabled_trigger_schedule

Name
postgresql_servers_with_log_disconnections_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

postgresql_servers_with_log_duration_disabled_default_action

Name
postgresql_servers_with_log_duration_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

postgresql_servers_with_log_duration_disabled_enabled_actions

Name
postgresql_servers_with_log_duration_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_logging_duration"
]

postgresql_servers_with_log_duration_disabled_trigger_enabled

Name
postgresql_servers_with_log_duration_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

postgresql_servers_with_log_duration_disabled_trigger_schedule

Name
postgresql_servers_with_log_duration_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

postgresql_servers_with_log_retention_less_than_or_equal_to_3_days_default_action

Name
postgresql_servers_with_log_retention_less_than_or_equal_to_3_days_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

postgresql_servers_with_log_retention_less_than_or_equal_to_3_days_enabled_actions

Name
postgresql_servers_with_log_retention_less_than_or_equal_to_3_days_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"update_log_retention_days"
]

postgresql_servers_with_log_retention_less_than_or_equal_to_3_days_log_retention_days

Name
postgresql_servers_with_log_retention_less_than_or_equal_to_3_days_log_retention_days
Description
The number of days logs should be retained.
Type
string
Default
7

postgresql_servers_with_log_retention_less_than_or_equal_to_3_days_trigger_enabled

Name
postgresql_servers_with_log_retention_less_than_or_equal_to_3_days_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

postgresql_servers_with_log_retention_less_than_or_equal_to_3_days_trigger_schedule

Name
postgresql_servers_with_log_retention_less_than_or_equal_to_3_days_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

postgresql_servers_with_ssl_disabled_default_action

Name
postgresql_servers_with_ssl_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

postgresql_servers_with_ssl_disabled_enabled_actions

Name
postgresql_servers_with_ssl_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_ssl"
]

postgresql_servers_with_ssl_disabled_trigger_enabled

Name
postgresql_servers_with_ssl_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

postgresql_servers_with_ssl_disabled_trigger_schedule

Name
postgresql_servers_with_ssl_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

redis_caches_with_basic_sku_trigger_enabled

Name
redis_caches_with_basic_sku_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

redis_caches_with_basic_sku_trigger_schedule

Name
redis_caches_with_basic_sku_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

securitycenter_settings_without_mcas_integration_trigger_enabled

Name
securitycenter_settings_without_mcas_integration_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

securitycenter_settings_without_mcas_integration_trigger_schedule

Name
securitycenter_settings_without_mcas_integration_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

securitycenter_settings_without_wdatp_integration_trigger_enabled

Name
securitycenter_settings_without_wdatp_integration_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

securitycenter_settings_without_wdatp_integration_trigger_schedule

Name
securitycenter_settings_without_wdatp_integration_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

securitycenters_with_automatic_provisioning_monitoring_agent_disabled_trigger_enabled

Name
securitycenters_with_automatic_provisioning_monitoring_agent_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

securitycenters_with_automatic_provisioning_monitoring_agent_disabled_trigger_schedule

Name
securitycenters_with_automatic_provisioning_monitoring_agent_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

securitycenters_with_azure_defender_for_app_service_disabled_default_action

Name
securitycenters_with_azure_defender_for_app_service_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

securitycenters_with_azure_defender_for_app_service_disabled_enabled_actions

Name
securitycenters_with_azure_defender_for_app_service_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_app_service_azure_defender"
]

securitycenters_with_azure_defender_for_app_service_disabled_trigger_enabled

Name
securitycenters_with_azure_defender_for_app_service_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

securitycenters_with_azure_defender_for_app_service_disabled_trigger_schedule

Name
securitycenters_with_azure_defender_for_app_service_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

securitycenters_with_azure_defender_for_container_disabled_default_action

Name
securitycenters_with_azure_defender_for_container_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

securitycenters_with_azure_defender_for_container_disabled_enabled_actions

Name
securitycenters_with_azure_defender_for_container_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_container_azure_defender"
]

securitycenters_with_azure_defender_for_container_disabled_trigger_enabled

Name
securitycenters_with_azure_defender_for_container_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

securitycenters_with_azure_defender_for_container_disabled_trigger_schedule

Name
securitycenters_with_azure_defender_for_container_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

securitycenters_with_azure_defender_for_container_registry_disabled_default_action

Name
securitycenters_with_azure_defender_for_container_registry_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

securitycenters_with_azure_defender_for_container_registry_disabled_enabled_actions

Name
securitycenters_with_azure_defender_for_container_registry_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_container_registry_azure_defender"
]

securitycenters_with_azure_defender_for_container_registry_disabled_trigger_enabled

Name
securitycenters_with_azure_defender_for_container_registry_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

securitycenters_with_azure_defender_for_container_registry_disabled_trigger_schedule

Name
securitycenters_with_azure_defender_for_container_registry_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

securitycenters_with_azure_defender_for_cosmosdb_disabled_default_action

Name
securitycenters_with_azure_defender_for_cosmosdb_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

securitycenters_with_azure_defender_for_cosmosdb_disabled_enabled_actions

Name
securitycenters_with_azure_defender_for_cosmosdb_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_cosmosdb_azure_defender"
]

securitycenters_with_azure_defender_for_cosmosdb_disabled_trigger_enabled

Name
securitycenters_with_azure_defender_for_cosmosdb_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

securitycenters_with_azure_defender_for_cosmosdb_disabled_trigger_schedule

Name
securitycenters_with_azure_defender_for_cosmosdb_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

securitycenters_with_azure_defender_for_dns_disabled_default_action

Name
securitycenters_with_azure_defender_for_dns_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

securitycenters_with_azure_defender_for_dns_disabled_enabled_actions

Name
securitycenters_with_azure_defender_for_dns_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_dns_azure_defender"
]

securitycenters_with_azure_defender_for_dns_disabled_trigger_enabled

Name
securitycenters_with_azure_defender_for_dns_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

securitycenters_with_azure_defender_for_dns_disabled_trigger_schedule

Name
securitycenters_with_azure_defender_for_dns_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

securitycenters_with_azure_defender_for_keyvault_disabled_default_action

Name
securitycenters_with_azure_defender_for_keyvault_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

securitycenters_with_azure_defender_for_keyvault_disabled_enabled_actions

Name
securitycenters_with_azure_defender_for_keyvault_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_key_vault_azure_defender"
]

securitycenters_with_azure_defender_for_keyvault_disabled_trigger_enabled

Name
securitycenters_with_azure_defender_for_keyvault_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

securitycenters_with_azure_defender_for_keyvault_disabled_trigger_schedule

Name
securitycenters_with_azure_defender_for_keyvault_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

securitycenters_with_azure_defender_for_open_source_relational_db_disabled_default_action

Name
securitycenters_with_azure_defender_for_open_source_relational_db_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

securitycenters_with_azure_defender_for_open_source_relational_db_disabled_enabled_actions

Name
securitycenters_with_azure_defender_for_open_source_relational_db_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_open_source_relational_db_azure_defender"
]

securitycenters_with_azure_defender_for_open_source_relational_db_disabled_trigger_enabled

Name
securitycenters_with_azure_defender_for_open_source_relational_db_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

securitycenters_with_azure_defender_for_open_source_relational_db_disabled_trigger_schedule

Name
securitycenters_with_azure_defender_for_open_source_relational_db_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

securitycenters_with_azure_defender_for_resource_manager_disabled_default_action

Name
securitycenters_with_azure_defender_for_resource_manager_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

securitycenters_with_azure_defender_for_resource_manager_disabled_enabled_actions

Name
securitycenters_with_azure_defender_for_resource_manager_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_resource_manager_azure_defender"
]

securitycenters_with_azure_defender_for_resource_manager_disabled_trigger_enabled

Name
securitycenters_with_azure_defender_for_resource_manager_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

securitycenters_with_azure_defender_for_resource_manager_disabled_trigger_schedule

Name
securitycenters_with_azure_defender_for_resource_manager_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

securitycenters_with_azure_defender_for_server_disabled_default_action

Name
securitycenters_with_azure_defender_for_server_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

securitycenters_with_azure_defender_for_server_disabled_enabled_actions

Name
securitycenters_with_azure_defender_for_server_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_server_azure_defender"
]

securitycenters_with_azure_defender_for_server_disabled_trigger_enabled

Name
securitycenters_with_azure_defender_for_server_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

securitycenters_with_azure_defender_for_server_disabled_trigger_schedule

Name
securitycenters_with_azure_defender_for_server_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

securitycenters_with_azure_defender_for_sql_db_disabled_default_action

Name
securitycenters_with_azure_defender_for_sql_db_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

securitycenters_with_azure_defender_for_sql_db_disabled_enabled_actions

Name
securitycenters_with_azure_defender_for_sql_db_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_sqldb_azure_defender"
]

securitycenters_with_azure_defender_for_sql_db_disabled_trigger_enabled

Name
securitycenters_with_azure_defender_for_sql_db_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

securitycenters_with_azure_defender_for_sql_db_disabled_trigger_schedule

Name
securitycenters_with_azure_defender_for_sql_db_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

securitycenters_with_azure_defender_for_sql_server_vm_disabled_default_action

Name
securitycenters_with_azure_defender_for_sql_server_vm_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

securitycenters_with_azure_defender_for_sql_server_vm_disabled_enabled_actions

Name
securitycenters_with_azure_defender_for_sql_server_vm_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_sql_server_vm_azure_defender"
]

securitycenters_with_azure_defender_for_sql_server_vm_disabled_trigger_enabled

Name
securitycenters_with_azure_defender_for_sql_server_vm_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

securitycenters_with_azure_defender_for_sql_server_vm_disabled_trigger_schedule

Name
securitycenters_with_azure_defender_for_sql_server_vm_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

securitycenters_with_azure_defender_for_storage_disabled_default_action

Name
securitycenters_with_azure_defender_for_storage_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

securitycenters_with_azure_defender_for_storage_disabled_enabled_actions

Name
securitycenters_with_azure_defender_for_storage_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_storage_azure_defender"
]

securitycenters_with_azure_defender_for_storage_disabled_trigger_enabled

Name
securitycenters_with_azure_defender_for_storage_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

securitycenters_with_azure_defender_for_storage_disabled_trigger_schedule

Name
securitycenters_with_azure_defender_for_storage_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

securitycenters_with_security_alerts_to_owner_disabled_trigger_enabled

Name
securitycenters_with_security_alerts_to_owner_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

securitycenters_with_security_alerts_to_owner_disabled_trigger_schedule

Name
securitycenters_with_security_alerts_to_owner_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

securitycenters_without_additional_email_configured_trigger_enabled

Name
securitycenters_without_additional_email_configured_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

securitycenters_without_additional_email_configured_trigger_schedule

Name
securitycenters_without_additional_email_configured_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

securitycenters_without_notify_alerts_configured_trigger_enabled

Name
securitycenters_without_notify_alerts_configured_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

securitycenters_without_notify_alerts_configured_trigger_schedule

Name
securitycenters_without_notify_alerts_configured_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

sql_databases_with_public_access_enabled_default_action

Name
sql_databases_with_public_access_enabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

sql_databases_with_public_access_enabled_enabled_actions

Name
sql_databases_with_public_access_enabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"revoke_firewall_rule"
]

sql_databases_with_public_access_enabled_trigger_enabled

Name
sql_databases_with_public_access_enabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

sql_databases_with_public_access_enabled_trigger_schedule

Name
sql_databases_with_public_access_enabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

sql_databases_with_transparent_data_encryption_disabled_default_action

Name
sql_databases_with_transparent_data_encryption_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

sql_databases_with_transparent_data_encryption_disabled_enabled_actions

Name
sql_databases_with_transparent_data_encryption_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_sql_db_tde"
]

sql_databases_with_transparent_data_encryption_disabled_trigger_enabled

Name
sql_databases_with_transparent_data_encryption_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

sql_databases_with_transparent_data_encryption_disabled_trigger_schedule

Name
sql_databases_with_transparent_data_encryption_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

sql_servers_tde_protector_not_encrypted_with_cmk_trigger_enabled

Name
sql_servers_tde_protector_not_encrypted_with_cmk_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

sql_servers_tde_protector_not_encrypted_with_cmk_trigger_schedule

Name
sql_servers_tde_protector_not_encrypted_with_cmk_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

sql_servers_with_auditing_disabled_trigger_enabled

Name
sql_servers_with_auditing_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

sql_servers_with_auditing_disabled_trigger_schedule

Name
sql_servers_with_auditing_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

sql_servers_with_auditing_retention_period_less_than_90_days_trigger_enabled

Name
sql_servers_with_auditing_retention_period_less_than_90_days_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

sql_servers_with_auditing_retention_period_less_than_90_days_trigger_schedule

Name
sql_servers_with_auditing_retention_period_less_than_90_days_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

sql_servers_with_public_network_access_enabled_default_action

Name
sql_servers_with_public_network_access_enabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

sql_servers_with_public_network_access_enabled_enabled_actions

Name
sql_servers_with_public_network_access_enabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"disable_public_network_access"
]

sql_servers_with_public_network_access_enabled_trigger_enabled

Name
sql_servers_with_public_network_access_enabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

sql_servers_with_public_network_access_enabled_trigger_schedule

Name
sql_servers_with_public_network_access_enabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

sql_servers_without_active_directory_admin_configured_trigger_enabled

Name
sql_servers_without_active_directory_admin_configured_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

sql_servers_without_active_directory_admin_configured_trigger_schedule

Name
sql_servers_without_active_directory_admin_configured_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

storage_accounts_with_blob_public_access_enabled_default_action

Name
storage_accounts_with_blob_public_access_enabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

storage_accounts_with_blob_public_access_enabled_enabled_actions

Name
storage_accounts_with_blob_public_access_enabled_enabled_actions
Description
The list of enabled actions approvers can select.
Type
list(string)
Default
[
"skip",
"disable_blob_public_access"
]

storage_accounts_with_blob_public_access_enabled_trigger_enabled

Name
storage_accounts_with_blob_public_access_enabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

storage_accounts_with_blob_public_access_enabled_trigger_schedule

Name
storage_accounts_with_blob_public_access_enabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

storage_accounts_with_blob_service_logging_disabled_default_action

Name
storage_accounts_with_blob_service_logging_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

storage_accounts_with_blob_service_logging_disabled_enabled_actions

Name
storage_accounts_with_blob_service_logging_disabled_enabled_actions
Description
The list of enabled actions approvers can select.
Type
list(string)
Default
[
"skip",
"enable_blob_service_logging"
]

storage_accounts_with_blob_service_logging_disabled_trigger_enabled

Name
storage_accounts_with_blob_service_logging_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

storage_accounts_with_blob_service_logging_disabled_trigger_schedule

Name
storage_accounts_with_blob_service_logging_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

storage_accounts_with_blob_soft_delete_disabled_default_action

Name
storage_accounts_with_blob_soft_delete_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

storage_accounts_with_blob_soft_delete_disabled_enabled_actions

Name
storage_accounts_with_blob_soft_delete_disabled_enabled_actions
Description
The list of enabled actions approvers can select.
Type
list(string)
Default
[
"skip",
"enable_blob_soft_delete"
]

storage_accounts_with_blob_soft_delete_disabled_trigger_enabled

Name
storage_accounts_with_blob_soft_delete_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

storage_accounts_with_blob_soft_delete_disabled_trigger_schedule

Name
storage_accounts_with_blob_soft_delete_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

storage_accounts_with_default_network_access_rule_allowed_default_action

Name
storage_accounts_with_default_network_access_rule_allowed_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

storage_accounts_with_default_network_access_rule_allowed_enabled_actions

Name
storage_accounts_with_default_network_access_rule_allowed_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"update_default_action_deny"
]

storage_accounts_with_default_network_access_rule_allowed_trigger_enabled

Name
storage_accounts_with_default_network_access_rule_allowed_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

storage_accounts_with_default_network_access_rule_allowed_trigger_schedule

Name
storage_accounts_with_default_network_access_rule_allowed_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

storage_accounts_with_encryption_at_rest_using_cmk_disabled_trigger_enabled

Name
storage_accounts_with_encryption_at_rest_using_cmk_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

storage_accounts_with_encryption_at_rest_using_cmk_disabled_trigger_schedule

Name
storage_accounts_with_encryption_at_rest_using_cmk_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

storage_accounts_with_infrastructure_encryption_disabled_trigger_enabled

Name
storage_accounts_with_infrastructure_encryption_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

storage_accounts_with_infrastructure_encryption_disabled_trigger_schedule

Name
storage_accounts_with_infrastructure_encryption_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

storage_accounts_with_no_min_tls_1_2_default_action

Name
storage_accounts_with_no_min_tls_1_2_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

storage_accounts_with_no_min_tls_1_2_enabled_actions

Name
storage_accounts_with_no_min_tls_1_2_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_min_tls_1_2"
]

storage_accounts_with_no_min_tls_1_2_trigger_enabled

Name
storage_accounts_with_no_min_tls_1_2_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

storage_accounts_with_no_min_tls_1_2_trigger_schedule

Name
storage_accounts_with_no_min_tls_1_2_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

storage_accounts_with_public_access_enabled_default_action

Name
storage_accounts_with_public_access_enabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

storage_accounts_with_public_access_enabled_enabled_actions

Name
storage_accounts_with_public_access_enabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"disable_public_network_access"
]

storage_accounts_with_public_access_enabled_trigger_enabled

Name
storage_accounts_with_public_access_enabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

storage_accounts_with_public_access_enabled_trigger_schedule

Name
storage_accounts_with_public_access_enabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

storage_accounts_with_queue_service_logging_disabled_default_action

Name
storage_accounts_with_queue_service_logging_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

storage_accounts_with_queue_service_logging_disabled_enabled_actions

Name
storage_accounts_with_queue_service_logging_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_queue_service_logging"
]

storage_accounts_with_queue_service_logging_disabled_trigger_enabled

Name
storage_accounts_with_queue_service_logging_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

storage_accounts_with_queue_service_logging_disabled_trigger_schedule

Name
storage_accounts_with_queue_service_logging_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

storage_accounts_with_secure_transfer_required_disabled_default_action

Name
storage_accounts_with_secure_transfer_required_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

storage_accounts_with_secure_transfer_required_disabled_enabled_actions

Name
storage_accounts_with_secure_transfer_required_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_secure_transfer"
]

storage_accounts_with_secure_transfer_required_disabled_trigger_enabled

Name
storage_accounts_with_secure_transfer_required_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

storage_accounts_with_secure_transfer_required_disabled_trigger_schedule

Name
storage_accounts_with_secure_transfer_required_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

storage_accounts_with_table_service_logging_disabled_default_action

Name
storage_accounts_with_table_service_logging_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

storage_accounts_with_table_service_logging_disabled_enabled_actions

Name
storage_accounts_with_table_service_logging_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_table_service_logging"
]

storage_accounts_with_table_service_logging_disabled_trigger_enabled

Name
storage_accounts_with_table_service_logging_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

storage_accounts_with_table_service_logging_disabled_trigger_schedule

Name
storage_accounts_with_table_service_logging_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

storage_accounts_with_trusted_microsoft_services_disabled_default_action

Name
storage_accounts_with_trusted_microsoft_services_disabled_default_action
Description
The default action to use when there are no approvers.
Type
string
Default
notify

storage_accounts_with_trusted_microsoft_services_disabled_enabled_actions

Name
storage_accounts_with_trusted_microsoft_services_disabled_enabled_actions
Description
The list of enabled actions to provide to approvers for selection.
Type
list(string)
Default
[
"skip",
"enable_trusted_microsoft_services"
]

storage_accounts_with_trusted_microsoft_services_disabled_trigger_enabled

Name
storage_accounts_with_trusted_microsoft_services_disabled_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

storage_accounts_with_trusted_microsoft_services_disabled_trigger_schedule

Name
storage_accounts_with_trusted_microsoft_services_disabled_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m
Name
storage_accounts_without_private_link_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false
Name
storage_accounts_without_private_link_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

subscriptions_diagnostic_setting_without_capturing_proper_categories_trigger_enabled

Name
subscriptions_diagnostic_setting_without_capturing_proper_categories_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

subscriptions_diagnostic_setting_without_capturing_proper_categories_trigger_schedule

Name
subscriptions_diagnostic_setting_without_capturing_proper_categories_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

subscriptions_without_activity_log_alert_for_create_policy_assignment_trigger_enabled

Name
subscriptions_without_activity_log_alert_for_create_policy_assignment_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

subscriptions_without_activity_log_alert_for_create_policy_assignment_trigger_schedule

Name
subscriptions_without_activity_log_alert_for_create_policy_assignment_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

subscriptions_without_activity_log_alert_for_create_update_nsg_trigger_enabled

Name
subscriptions_without_activity_log_alert_for_create_update_nsg_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

subscriptions_without_activity_log_alert_for_create_update_nsg_trigger_schedule

Name
subscriptions_without_activity_log_alert_for_create_update_nsg_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

subscriptions_without_activity_log_alert_for_create_update_security_solution_trigger_enabled

Name
subscriptions_without_activity_log_alert_for_create_update_security_solution_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

subscriptions_without_activity_log_alert_for_create_update_security_solution_trigger_schedule

Name
subscriptions_without_activity_log_alert_for_create_update_security_solution_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

subscriptions_without_activity_log_alert_for_create_update_sql_servers_firewall_rule_trigger_enabled

Name
subscriptions_without_activity_log_alert_for_create_update_sql_servers_firewall_rule_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

subscriptions_without_activity_log_alert_for_create_update_sql_servers_firewall_rule_trigger_schedule

Name
subscriptions_without_activity_log_alert_for_create_update_sql_servers_firewall_rule_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

subscriptions_without_activity_log_alert_for_delete_nsg_trigger_enabled

Name
subscriptions_without_activity_log_alert_for_delete_nsg_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

subscriptions_without_activity_log_alert_for_delete_nsg_trigger_schedule

Name
subscriptions_without_activity_log_alert_for_delete_nsg_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

subscriptions_without_activity_log_alert_for_delete_policy_assignment_trigger_enabled

Name
subscriptions_without_activity_log_alert_for_delete_policy_assignment_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

subscriptions_without_activity_log_alert_for_delete_policy_assignment_trigger_schedule

Name
subscriptions_without_activity_log_alert_for_delete_policy_assignment_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

subscriptions_without_activity_log_alert_for_delete_public_ip_address_trigger_enabled

Name
subscriptions_without_activity_log_alert_for_delete_public_ip_address_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

subscriptions_without_activity_log_alert_for_delete_public_ip_address_trigger_schedule

Name
subscriptions_without_activity_log_alert_for_delete_public_ip_address_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

subscriptions_without_activity_log_alert_for_delete_security_solution_trigger_enabled

Name
subscriptions_without_activity_log_alert_for_delete_security_solution_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

subscriptions_without_activity_log_alert_for_delete_security_solution_trigger_schedule

Name
subscriptions_without_activity_log_alert_for_delete_security_solution_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

subscriptions_without_activity_log_alert_for_delete_sql_servers_firewall_rule_trigger_enabled

Name
subscriptions_without_activity_log_alert_for_delete_sql_servers_firewall_rule_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

subscriptions_without_activity_log_alert_for_delete_sql_servers_firewall_rule_trigger_schedule

Name
subscriptions_without_activity_log_alert_for_delete_sql_servers_firewall_rule_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

subscriptions_without_activity_log_alert_for_update_public_ip_address_trigger_enabled

Name
subscriptions_without_activity_log_alert_for_update_public_ip_address_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

subscriptions_without_activity_log_alert_for_update_public_ip_address_trigger_schedule

Name
subscriptions_without_activity_log_alert_for_update_public_ip_address_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

subscriptions_without_application_insight_configured_trigger_enabled

Name
subscriptions_without_application_insight_configured_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

subscriptions_without_application_insight_configured_trigger_schedule

Name
subscriptions_without_application_insight_configured_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

subscriptions_without_network_bastion_host_trigger_enabled

Name
subscriptions_without_network_bastion_host_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

subscriptions_without_network_bastion_host_trigger_schedule

Name
subscriptions_without_network_bastion_host_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

tenants_with_guest_users_trigger_enabled

Name
tenants_with_guest_users_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

tenants_with_guest_users_trigger_schedule

Name
tenants_with_guest_users_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m

tenants_with_more_than_five_iam_global_administrator_trigger_enabled

Name
tenants_with_more_than_five_iam_global_administrator_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

tenants_with_more_than_five_iam_global_administrator_trigger_schedule

Name
tenants_with_more_than_five_iam_global_administrator_trigger_schedule
Description
If the trigger is enabled, run it on this schedule.
Type
string
Default
15m