Merge branch 'main' into Update-Custom-PrivateDNSInitiative

Azure · Nov 23, 2022 · b652624 · b652624
2 parents 0359a48 + e04594e
commit b652624
Show file tree

Hide file tree

Showing 5 changed files with 76 additions and 11 deletions.
diff --git a/eslzArm/managementGroupTemplates/policyDefinitions/policies.json b/eslzArm/managementGroupTemplates/policyDefinitions/policies.json
diff --git a/src/resources/Microsoft.Authorization/policyDefinitions/Deploy-ASC-SecurityContacts.json b/src/resources/Microsoft.Authorization/policyDefinitions/Deploy-ASC-SecurityContacts.json
@@ -6,8 +6,8 @@
   "properties": {
     "policyType": "Custom",
     "mode": "All",
-    "displayName": "Deploy Azure Security Center Security Contacts",
-    "description": "Deploy Azure Security Center Security Contacts",
+    "displayName": "Deploy Microsoft Defender for Cloud Security Contacts",
+    "description": "Deploy Microsoft Defender for Cloud Security Contacts",
     "metadata": {
       "version": "1.0.0",
       "category": "Security Center",
@@ -37,6 +37,19 @@
           "displayName": "Effect",
           "description": "Enable or disable the execution of the policy"
         }
+      },
+      "minimalSeverity": {
+        "type": "string",
+        "defaultValue": "High",
+        "allowedValues": [
+          "High",
+          "Medium",
+          "Low"
+        ],
+        "metadata": {
+          "displayName": "Minimal severity",
+          "description": "Defines the minimal alert severity which will be sent as email notifications"
+        }
       }
     },
     "policyRule": {
@@ -63,6 +76,10 @@
                 "field": "Microsoft.Security/securityContacts/email",
                 "contains": "[[parameters('emailSecurityContact')]"
               },
+              {
+                "field": "Microsoft.Security/securityContacts/alertNotifications.minimalSeverity",
+                "contains": "[[parameters('minimalSeverity')]"
+              },
               {
                 "field": "type",
                 "equals": "Microsoft.Security/securityContacts"
@@ -113,7 +130,7 @@
                       },
                       "alertNotifications": {
                         "state": "On",
-                        "minimalSeverity": "High"
+                        "minimalSeverity": "[[parameters('minimalSeverity')]"
                       }
                     }
                   }

diff --git a/...rces/Microsoft.Authorization/policySetDefinitions/Deploy-MDFC-Config.AzureChinaCloud.json b/...rces/Microsoft.Authorization/policySetDefinitions/Deploy-MDFC-Config.AzureChinaCloud.json
@@ -23,6 +23,19 @@
           "description": "Provide email address for Microsoft Defender for Cloud contact details"
         }
       },
+      "minimalSeverity": {
+        "type": "string",
+        "allowedValues": [
+          "High",
+          "Medium",
+          "Low"
+        ],
+        "defaultValue": "High",
+        "metadata": {
+          "displayName": "Minimal severity",
+          "description": "Defines the minimal alert severity which will be sent as email notifications"
+        }
+      },
       "logAnalytics": {
         "type": "String",
         "metadata": {
@@ -119,6 +132,9 @@
         "parameters": {
           "emailSecurityContact": {
             "value": "[[parameters('emailSecurityContact')]"
+          },
+          "minimalSeverity":{
+            "value":"[[parameters('minimalSeverity')]"
           }
         },
         "groupNames": []

diff --git a/...es/Microsoft.Authorization/policySetDefinitions/Deploy-MDFC-Config.AzureUSGovernment.json b/...es/Microsoft.Authorization/policySetDefinitions/Deploy-MDFC-Config.AzureUSGovernment.json
@@ -23,6 +23,19 @@
           "description": "Provide email address for Microsoft Defender for Cloud contact details"
         }
       },
+      "minimalSeverity": {
+        "type": "string",
+        "allowedValues": [
+          "High",
+          "Medium",
+          "Low"
+        ],
+        "defaultValue": "High",
+        "metadata": {
+          "displayName": "Minimal severity",
+          "description": "Defines the minimal alert severity which will be sent as email notifications"
+        }
+      },
       "logAnalytics": {
         "type": "String",
         "metadata": {
@@ -185,6 +198,9 @@
         "parameters": {
           "emailSecurityContact": {
             "value": "[[parameters('emailSecurityContact')]"
+          },
+          "minimalSeverity":{
+            "value":"[[parameters('minimalSeverity')]"
           }
         },
         "groupNames": []

diff --git a/src/resources/Microsoft.Authorization/policySetDefinitions/Deploy-MDFC-Config.json b/src/resources/Microsoft.Authorization/policySetDefinitions/Deploy-MDFC-Config.json
@@ -23,6 +23,19 @@
           "description": "Provide email address for Microsoft Defender for Cloud contact details"
         }
       },
+      "minimalSeverity": {
+        "type": "string",
+        "allowedValues": [
+          "High",
+          "Medium",
+          "Low"
+        ],
+        "defaultValue": "High",
+        "metadata": {
+          "displayName": "Minimal severity",
+          "description": "Defines the minimal alert severity which will be sent as email notifications"
+        }
+      },
       "logAnalytics": {
         "type": "String",
         "metadata": {
@@ -288,13 +301,16 @@
           }
         },
         "groupNames": []
-      },      
+      },
       {
         "policyDefinitionReferenceId": "securityEmailContact",
         "policyDefinitionId": "/providers/Microsoft.Management/managementGroups/contoso/providers/Microsoft.Authorization/policyDefinitions/Deploy-ASC-SecurityContacts",
         "parameters": {
           "emailSecurityContact": {
             "value": "[[parameters('emailSecurityContact')]"
+          },
+          "minimalSeverity": {
+            "value": "[[parameters('minimalSeverity')]"
           }
         },
         "groupNames": []
@@ -318,4 +334,4 @@
     ],
     "policyDefinitionGroups": null
   }
-}
+}