Updating exemption for securityContacts to reflect the expected, as o…

…f both MCSB and what the policy deploys
Azure · Feb 6, 2025 · 9491b62 · 9491b62
1 parent 13af15d
commit 9491b62
Showing 1 changed file with 11 additions and 12 deletions.
diff --git a/src/resources/Microsoft.Authorization/policyDefinitions/Deploy-ASC-SecurityContacts.json b/src/resources/Microsoft.Authorization/policyDefinitions/Deploy-ASC-SecurityContacts.json
@@ -29,10 +29,7 @@
       "effect": {
         "type": "String",
         "defaultValue": "DeployIfNotExists",
-        "allowedValues": [
-          "DeployIfNotExists",
-          "Disabled"
-        ],
+        "allowedValues": ["DeployIfNotExists", "Disabled"],
         "metadata": {
           "displayName": "Effect",
           "description": "Enable or disable the execution of the policy"
@@ -41,11 +38,7 @@
       "minimalSeverity": {
         "type": "String",
         "defaultValue": "High",
-        "allowedValues": [
-          "High",
-          "Medium",
-          "Low"
-        ],
+        "allowedValues": ["High", "Medium", "Low"],
         "metadata": {
           "displayName": "Minimal severity",
           "description": "Defines the minimal alert severity which will be sent as email notifications"
@@ -83,6 +76,14 @@
               {
                 "field": "Microsoft.Security/securityContacts/notificationsSources[*].Alert.minimalSeverity",
                 "contains": "[[parameters('minimalSeverity')]"
+              },
+              {
+                "equals": "On",
+                "field": "Microsoft.Security/securityContacts/notificationsByRole.state"
+              },
+              {
+                "contains": "Owner",
+                "field": "Microsoft.Security/securityContacts/notificationsByRole.roles[*]"
               }
             ]
           },
@@ -126,9 +127,7 @@
                       "isEnabled": true,
                       "notificationsByRole": {
                         "state": "On",
-                        "roles": [
-                          "Owner"
-                        ]
+                        "roles": ["Owner"]
                       },
                       "notificationsSources": [
                         {