|
1 | 1 | { |
2 | | - "id": "https://schema.management.azure.com/schemas/2019-09-01/policyDefinition.json#", |
| 2 | + "id": "https://schema.management.azure.com/schemas/2020-09-01/policyDefinition.json#", |
3 | 3 | "$schema": "http://json-schema.org/draft-04/schema#", |
4 | 4 | "title": "Policy Definition", |
5 | 5 | "description": "This schema defines Azure resource policy definition, please see https://azure.microsoft.com/documentation/articles/resource-manager-policy/ for more details.", |
|
20 | 20 | "oneOf": [ |
21 | 21 | { |
22 | 22 | "type": "string", |
23 | | - "enum": [ "append", "audit", "auditIfNotExists", "deny", "deployIfNotExists", "modify", "disabled" ] |
| 23 | + "enum": [ "append", "audit", "auditIfNotExists", "deny", "deployIfNotExists", "manual", "modify", "disabled" ] |
24 | 24 | }, |
25 | 25 | { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } |
26 | 26 | ] |
|
29 | 29 | "oneOf": [ |
30 | 30 | { "$ref": "#/definitions/ifNotExistsDetails" }, |
31 | 31 | { "$ref": "#/definitions/appendDetails" }, |
32 | | - { "$ref": "#/definitions/modifyDetails" } |
| 32 | + { "$ref": "#/definitions/modifyDetails" }, |
| 33 | + { "$ref": "#/definitions/manualDetails" } |
33 | 34 | ] |
34 | 35 | } |
35 | 36 | }, |
|
106 | 107 | "type": "object", |
107 | 108 | "properties": { |
108 | 109 | "conflictEffect": { |
109 | | - "type": "string", |
110 | | - "enum": [ "deny", "audit" ] |
| 110 | + "oneOf": [ |
| 111 | + { |
| 112 | + "type": "string", |
| 113 | + "enum": [ "audit", "deny" ] |
| 114 | + }, |
| 115 | + { |
| 116 | + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" |
| 117 | + } |
| 118 | + ] |
111 | 119 | }, |
112 | 120 | "roleDefinitionIds": { |
113 | 121 | "type": "array", |
|
129 | 137 | "value": { |
130 | 138 | }, |
131 | 139 | "condition": { |
132 | | - "type": "string" |
| 140 | + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" |
133 | 141 | } |
134 | 142 | }, |
135 | 143 | "required": [ |
|
145 | 153 | "required": [ "roleDefinitionIds", "operations" ], |
146 | 154 | "additionalProperties": false |
147 | 155 | }, |
| 156 | + "manualDetails": { |
| 157 | + "type": "object", |
| 158 | + "properties": { |
| 159 | + "defaultState": { |
| 160 | + "oneOf": [ |
| 161 | + { |
| 162 | + "type": "string", |
| 163 | + "enum": [ "Compliant", "NonCompliant", "Unknown" ] |
| 164 | + }, |
| 165 | + { |
| 166 | + "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" |
| 167 | + } |
| 168 | + ] |
| 169 | + } |
| 170 | + }, |
| 171 | + "additionalProperties": false |
| 172 | + }, |
148 | 173 | "condition": { |
149 | 174 | "allOf": [ |
150 | 175 | { |
|
369 | 394 | { |
370 | 395 | "properties": { |
371 | 396 | "value": { |
372 | | - "type": [ "array", "string" ] |
| 397 | + "oneOf": [ |
| 398 | + { "type": "array" }, |
| 399 | + { "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" } |
| 400 | + ] |
373 | 401 | }, |
374 | 402 | "name": { |
375 | 403 | "type": "string" |
|
0 commit comments