Backup.csv

"DisplayName";"Description";"Path"
"[Preview]: Configure Recovery Services vaults to use private DNS zones for backup";"Use private DNS zones to override the DNS resolution for a private endpoint. A private DNS zone links to your virtual network to resolve to your Recovery Services vault. Learn more at: https://aka.ms/AB-PrivateEndpoints.";"https://github.com/Azure/azure-policy/tree/master/built-in-policies/policyDefinitions/Backup/AzBackupRSVault_PeDnsConfigDeploy.json"
"[Preview]: Configure blob backup for all storage accounts that do not contain a given tag to a backup vault in the same region";"Enforce backup for blobs on all storage accounts that do not contain a given tag to a central backup vault. Doing this can help you manage backup of blobs contained across multiple storage accounts at scale. For more details, refer to https://aka.ms/AB-BlobBackupAzPolicies";"https://github.com/Azure/azure-policy/tree/master/built-in-policies/policyDefinitions/Backup/BlobBackupForStorageAccoutsWithoutTag_Deploy.json"
"[Preview]: Configure backup for blobs on storage accounts with a given tag to an existing backup vault in the same region";"Enforce backup for blobs on all storage accounts that contain a given tag to a central backup vault. Doing this can help you manage backup of blobs contained across multiple storage accounts at scale. For more details, refer to https://aka.ms/AB-BlobBackupAzPolicies";"https://github.com/Azure/azure-policy/tree/master/built-in-policies/policyDefinitions/Backup/BlobBackupForStorageAccoutsWithTag_Deploy.json"
"Deploy Diagnostic Settings for Recovery Services Vault to Log Analytics workspace for resource specific categories.";"Deploy Diagnostic Settings for Recovery Services Vault to stream to Log Analytics workspace for Resource specific categories. If any of the Resource specific categories are not enabled, a new diagnostic setting is created.";"https://github.com/Azure/azure-policy/tree/master/built-in-policies/policyDefinitions/Backup/EnableRecoveryServiceVaultDiagnosticSetting_Backup_DeployIfNotExist.json"
"[Preview]: Configure Recovery Services vaults to use private endpoints for backup";"Private endpoints connect your virtual networks to Azure services without a public IP address at the source or destination. By mapping private endpoints to Recovery Services vaults, you can reduce data leakage risks. Note that your vaults need to meet certain pre-requisites to be eligible for private endpoint configuration. Learn more at : https://go.microsoft.com/fwlink/?linkid=2187162.";"https://github.com/Azure/azure-policy/tree/master/built-in-policies/policyDefinitions/Backup/RecoveryServices_PrivateEndpoint_Deploy.json"
"Configure backup on virtual machines without a given tag to a new recovery services vault with a default policy";"Enforce backup for all virtual machines by deploying a recovery services vault in the same location and resource group as the virtual machine. Doing this is useful when different application teams in your organization are allocated separate resource groups and need to manage their own backups and restores. You can optionally exclude virtual machines containing a specified tag to control the scope of assignment. See https://aka.ms/AzureVMAppCentricBackupExcludeTag.";"https://github.com/Azure/azure-policy/tree/master/built-in-policies/policyDefinitions/Backup/VirtualMachineApplicationCentricBackup_Backup_Deploy_WithOutTag.json"
"Configure backup on virtual machines with a given tag to a new recovery services vault with a default policy";"Enforce backup for all virtual machines by deploying a recovery services vault in the same location and resource group as the virtual machine. Doing this is useful when different application teams in your organization are allocated separate resource groups and need to manage their own backups and restores. You can optionally include virtual machines containing a specified tag to control the scope of assignment. See https://aka.ms/AzureVMAppCentricBackupIncludeTag.";"https://github.com/Azure/azure-policy/tree/master/built-in-policies/policyDefinitions/Backup/VirtualMachineApplicationCentricBackup_Backup_Deploy_WithTag.json"
"Configure backup on virtual machines without a given tag to an existing recovery services vault in the same location";"Enforce backup for all virtual machines by backing them up to an existing central recovery services vault in the same location and subscription as the virtual machine. Doing this is useful when there is a central team in your organization managing backups for all resources in a subscription. You can optionally exclude virtual machines containing a specified tag to control the scope of assignment. See https://aka.ms/AzureVMCentralBackupExcludeTag.";"https://github.com/Azure/azure-policy/tree/master/built-in-policies/policyDefinitions/Backup/VirtualMachineBackup_Backup_DeployIfNotExists.json"
"Configure backup on virtual machines with a given tag to an existing recovery services vault in the same location";"Enforce backup for all virtual machines by backing them up to an existing central recovery services vault in the same location and subscription as the virtual machine. Doing this is useful when there is a central team in your organization managing backups for all resources in a subscription. You can optionally include virtual machines containing a specified tag to control the scope of assignment. See https://aka.ms/AzureVMCentralBackupIncludeTag.";"https://github.com/Azure/azure-policy/tree/master/built-in-policies/policyDefinitions/Backup/VirtualMachineWithTag_Backup_Deploy.json"
"append-backup-rsvault-cmk";"append-backup-rsvault-cmk";"https://github.com/Azure/Community-Policy/tree/master/Policies/Backup/append-backup-rsvault-cmk/azurepolicy.json"
"vm-backup-without-tag";"vm-backup-without-tag";"https://github.com/Azure/Community-Policy/tree/master/Policies/Backup/vm-backup-without-tag/azurepolicy.json"
"vm-tag-based-backup";"vm-tag-based-backup";"https://github.com/Azure/Community-Policy/tree/master/Policies/Backup/vm-tag-based-backup/azurepolicy.json"