EnterprisePolicyAsCode

7.2.2

policyAssignments/CAF-Connectivity-Default.json

{
    "nodeName": "/Connectivity/",
    "scope": {
        "tenant1": [
            "/providers/Microsoft.Management/managementGroups/connectivity"
        ]
    },
    "children": [
        {
            "nodeName": "Networking",
            "assignment": {
                "name": "Enable-DDoS-VNET",
                "displayName": "Virtual networks should be protected by Azure DDoS Network Protection",
                "description": "Protect your virtual networks against volumetric and protocol attacks with Azure DDoS Network Protection. For more information, visit https://aka.ms/ddosprotectiondocs."
            },
            "definitionEntry": {
                "policyId": "/providers/Microsoft.Authorization/policyDefinitions/94de2ad3-e0c1-4caf-ad78-5d47bbc83d3d",
                "friendlyNameToDocumentIfGuid": "Enable DDOS"
            },
            "parameters": {
                "effect": "Modify",
                "ddosPlan": ""
            },
            "nonComplianceMessages": [
                {
                    "Message": "Virtual networks must be protected by Azure DDoS Network Protection."
                }
            ]
        }
    ]
}