Azure Analysis service - Firewall off deny policy

Question

I am trying to build a policy to deny disabling firewall in azure analysis service. But not able to deny disabling firewall.

I used below definition but it's not working

"if": {
        "allOf": [
          {
            "field": "Microsoft.AnalysisServices/servers/ipV4FirewallSettings",
            "equals": "Disabled"
          }
        ]
      },
      "then": {
        "effect": "deny"
      }
    

Answer 1

The other method you can approach to meet your requirement by disabling the firewall for the Analysis service and then apply ReadOnly policy to that service.

You can also try the below code to create custom policy:

{
    "policyRule": {
        "if": {
            "allOf": [{
                    "field": "type",
                    "equals": "Microsoft.AnalysisServices/servers/ipV4FirewallSettings"
                }
            ]
        },
        "then": {
            "effect": "deny"
        }
    }
}

Refer to Hardening Azure Analysis Services with the new firewall capability for more details about Analysis Services and firewall.