Azure / Azure/template-analyzer

[Built-in Rule] Service Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign

Open
#44 6 comments 0 reactions 0 assignees View on GitHub
✔ allOf ✔ array wildcard ✔ equals ✔ where ❌ not built-in rule
Dominant language
C#
Stars
143
Forks
47
PR merge metrics
No merged PRs in 30d

Description

Azure policy: https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/Service%20Fabric/ServiceFabric_AuditClusterProtectionLevel_Audit.json

``` javascript
{
"name": "ServiceFabric_ClusterProtectionLevel_EncryptAndSign",
"description": "Service Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign",
"recommendation": "Set the protection level to ensure that all node-to-node messages are encrypted and digitally signed",
"helpUri": "https://github.com/Azure/template-analyzer/docs/built-in-bpa-rules.md/#service-fabric-clusters-should-have-the-clusterprotectionlevel-property-set-to-encryptandsign",
"evaluation": {
"resourceType": "Microsoft.ServiceFabric/clusters",
"allOf": [
{
"path": "properties.fabricSettings[*].name",
"equals": "Security"
},
{
"path": "properties.fabricSettings[*].parameters[*].name",
"equals": "ClusterProtectionLevel"
},
{
"path": "properties.fabricSettings[*].parameters[*].value",
"equals": "EncryptAndSign"
}
]
}
}
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.