Skip to content

Commit 9b13ee5

Browse files
committed
Merge branch 'policy-samples' of https://github.com/azure-ai-foundry/foundry-samples into policy-samples
2 parents 9bb1e26 + 101bb07 commit 9b13ee5

File tree

1 file changed

+14
-0
lines changed
  • samples/microsoft/infrastructure-setup/05-custom-policy-definitions

1 file changed

+14
-0
lines changed

samples/microsoft/infrastructure-setup/05-custom-policy-definitions/README.md

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,20 @@
22

33
Azure Policy enables you to put guardrails on resource configurations and enable self-serve resource creation in your organization. This repository shows examples for common scenarios in Azure AI Foundry.
44

5+
## Available Policies
6+
7+
### 1. Deny Disallowed Connections (`deny-disallowed-connections.json`)
8+
This policy restricts AI Foundry project connections to only allow specific categories. By default, it only allows `CognitiveSearch` connections, but this can be customized via parameters.
9+
10+
**Policy Effect**: Deny
11+
**Scope**: Microsoft.CognitiveServices/accounts/projects/connections
12+
13+
### 2. Deny Key Authentication Connections (`deny-key-auth-connections.json`)
14+
This policy prevents the creation of connections that use key-based authentication methods.
15+
16+
### 3. Audit Enabled VNet Injection (`audit-enabled-vnet-injection.json`)
17+
This policy audits whether VNet injection is properly enabled for AI Foundry resources.
18+
519
## Deployment
620

721
### Prerequisites

0 commit comments

Comments
 (0)