DDoS Protection Should Use Approved Plan
Overview
Virtual networks with DDoS protection enabled should use approved protection plan.
Vendor
Azure
Cloud Service
Network
Input
{"ddosPlanId":{"label":"DDoS Protection Plan Resource ID","helpText":"String to match Resource ID for central DDoS protection plan all VNets in scope should use, e.g. \"/subscriptions/a-subscription-id/resourceGroups/RG1/providers/Microsoft.Network/ddosProtectionPlans/Prod-DDoS\", or \"Prod-DDos\"","value":"","type":"string"}}
Related Requirements
References
https://aka.ms/ddosprotectiondocs
Severity
4
Item Types
Microsoft.Network.virtualNetworks