{
  "properties": {
    "displayName": "FedRAMP Moderate",
    "policyType": "BuiltIn",
    "description": "This initiative includes policies that address a subset of FedRAMP Moderate controls. Additional policies will be added in upcoming releases. For more information, visit https://aka.ms/fedrampm-initiative.",
    "metadata": {
      "version": "5.0.0",
      "category": "Regulatory Compliance"
    },
    "policyDefinitionGroups": [
      {
        "name": "NIST_SP_800-53_R4_AC-1",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-1"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-2",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-2"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-2(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-2(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-2(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-2(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-2(3)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-2(3)"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-2(4)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-2(4)"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-2(5)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-2(5)"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-2(7)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-2(7)"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-2(9)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-2(9)"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-2(10)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-2(10)"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-2(12)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-2(12)"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-3",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-3"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-4",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-4"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-4(21)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-4(21)"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-5",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-5"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-6",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-6"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-6(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-6(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-6(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-6(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-6(5)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-6(5)"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-6(9)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-6(9)"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-6(10)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-6(10)"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-7",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-7"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-8",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-8"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-10",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-10"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-11",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-11"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-11(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-11(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-12",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-12"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-14",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-14"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-17",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-17"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-17(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-17(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-17(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-17(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-17(3)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-17(3)"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-17(4)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-17(4)"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-17(9)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-17(9)"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-18",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-18"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-18(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-18(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-19",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-19"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-19(5)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-19(5)"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-20",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-20"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-20(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-20(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-20(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-20(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-21",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-21"
      },
      {
        "name": "NIST_SP_800-53_R4_AC-22",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AC-22"
      },
      {
        "name": "NIST_SP_800-53_R4_AT-1",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AT-1"
      },
      {
        "name": "NIST_SP_800-53_R4_AT-2",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AT-2"
      },
      {
        "name": "NIST_SP_800-53_R4_AT-2(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AT-2(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_AT-3",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AT-3"
      },
      {
        "name": "NIST_SP_800-53_R4_AT-4",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AT-4"
      },
      {
        "name": "NIST_SP_800-53_R4_AU-1",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AU-1"
      },
      {
        "name": "NIST_SP_800-53_R4_AU-2",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AU-2"
      },
      {
        "name": "NIST_SP_800-53_R4_AU-2(3)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AU-2(3)"
      },
      {
        "name": "NIST_SP_800-53_R4_AU-3",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AU-3"
      },
      {
        "name": "NIST_SP_800-53_R4_AU-3(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AU-3(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_AU-4",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AU-4"
      },
      {
        "name": "NIST_SP_800-53_R4_AU-5",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AU-5"
      },
      {
        "name": "NIST_SP_800-53_R4_AU-6",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AU-6"
      },
      {
        "name": "NIST_SP_800-53_R4_AU-6(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AU-6(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_AU-6(3)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AU-6(3)"
      },
      {
        "name": "NIST_SP_800-53_R4_AU-7",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AU-7"
      },
      {
        "name": "NIST_SP_800-53_R4_AU-7(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AU-7(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_AU-8",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AU-8"
      },
      {
        "name": "NIST_SP_800-53_R4_AU-8(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AU-8(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_AU-9",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AU-9"
      },
      {
        "name": "NIST_SP_800-53_R4_AU-9(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AU-9(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_AU-9(4)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AU-9(4)"
      },
      {
        "name": "NIST_SP_800-53_R4_AU-11",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AU-11"
      },
      {
        "name": "NIST_SP_800-53_R4_AU-12",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_AU-12"
      },
      {
        "name": "NIST_SP_800-53_R4_CA-1",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CA-1"
      },
      {
        "name": "NIST_SP_800-53_R4_CA-2",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CA-2"
      },
      {
        "name": "NIST_SP_800-53_R4_CA-2(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CA-2(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_CA-2(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CA-2(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_CA-2(3)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CA-2(3)"
      },
      {
        "name": "NIST_SP_800-53_R4_CA-3",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CA-3"
      },
      {
        "name": "NIST_SP_800-53_R4_CA-3(3)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CA-3(3)"
      },
      {
        "name": "NIST_SP_800-53_R4_CA-3(5)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CA-3(5)"
      },
      {
        "name": "NIST_SP_800-53_R4_CA-5",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CA-5"
      },
      {
        "name": "NIST_SP_800-53_R4_CA-6",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CA-6"
      },
      {
        "name": "NIST_SP_800-53_R4_CA-7",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CA-7"
      },
      {
        "name": "NIST_SP_800-53_R4_CA-7(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CA-7(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_CA-8",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CA-8"
      },
      {
        "name": "NIST_SP_800-53_R4_CA-8(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CA-8(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_CA-9",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CA-9"
      },
      {
        "name": "NIST_SP_800-53_R4_CM-1",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CM-1"
      },
      {
        "name": "NIST_SP_800-53_R4_CM-2",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CM-2"
      },
      {
        "name": "NIST_SP_800-53_R4_CM-2(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CM-2(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_CM-2(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CM-2(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_CM-2(3)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CM-2(3)"
      },
      {
        "name": "NIST_SP_800-53_R4_CM-2(7)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CM-2(7)"
      },
      {
        "name": "NIST_SP_800-53_R4_CM-3",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CM-3"
      },
      {
        "name": "NIST_SP_800-53_R4_CM-4",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CM-4"
      },
      {
        "name": "NIST_SP_800-53_R4_CM-5",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CM-5"
      },
      {
        "name": "NIST_SP_800-53_R4_CM-5(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CM-5(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_CM-5(3)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CM-5(3)"
      },
      {
        "name": "NIST_SP_800-53_R4_CM-5(5)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CM-5(5)"
      },
      {
        "name": "NIST_SP_800-53_R4_CM-6",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CM-6"
      },
      {
        "name": "NIST_SP_800-53_R4_CM-6(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CM-6(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_CM-7",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CM-7"
      },
      {
        "name": "NIST_SP_800-53_R4_CM-7(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CM-7(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_CM-7(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CM-7(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_CM-7(5)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CM-7(5)"
      },
      {
        "name": "NIST_SP_800-53_R4_CM-8",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CM-8"
      },
      {
        "name": "NIST_SP_800-53_R4_CM-8(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CM-8(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_CM-8(3)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CM-8(3)"
      },
      {
        "name": "NIST_SP_800-53_R4_CM-8(5)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CM-8(5)"
      },
      {
        "name": "NIST_SP_800-53_R4_CM-9",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CM-9"
      },
      {
        "name": "NIST_SP_800-53_R4_CM-10",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CM-10"
      },
      {
        "name": "NIST_SP_800-53_R4_CM-10(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CM-10(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_CM-11",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CM-11"
      },
      {
        "name": "NIST_SP_800-53_R4_CP-1",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CP-1"
      },
      {
        "name": "NIST_SP_800-53_R4_CP-2",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CP-2"
      },
      {
        "name": "NIST_SP_800-53_R4_CP-2(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CP-2(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_CP-2(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CP-2(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_CP-2(3)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CP-2(3)"
      },
      {
        "name": "NIST_SP_800-53_R4_CP-2(8)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CP-2(8)"
      },
      {
        "name": "NIST_SP_800-53_R4_CP-3",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CP-3"
      },
      {
        "name": "NIST_SP_800-53_R4_CP-4",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CP-4"
      },
      {
        "name": "NIST_SP_800-53_R4_CP-4(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CP-4(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_CP-6",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CP-6"
      },
      {
        "name": "NIST_SP_800-53_R4_CP-6(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CP-6(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_CP-6(3)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CP-6(3)"
      },
      {
        "name": "NIST_SP_800-53_R4_CP-7",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CP-7"
      },
      {
        "name": "NIST_SP_800-53_R4_CP-7(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CP-7(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_CP-7(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CP-7(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_CP-7(3)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CP-7(3)"
      },
      {
        "name": "NIST_SP_800-53_R4_CP-8",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CP-8"
      },
      {
        "name": "NIST_SP_800-53_R4_CP-8(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CP-8(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_CP-8(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CP-8(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_CP-9",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CP-9"
      },
      {
        "name": "NIST_SP_800-53_R4_CP-9(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CP-9(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_CP-9(3)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CP-9(3)"
      },
      {
        "name": "NIST_SP_800-53_R4_CP-10",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CP-10"
      },
      {
        "name": "NIST_SP_800-53_R4_CP-10(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_CP-10(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_IA-1",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IA-1"
      },
      {
        "name": "NIST_SP_800-53_R4_IA-2",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IA-2"
      },
      {
        "name": "NIST_SP_800-53_R4_IA-2(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IA-2(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_IA-2(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IA-2(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_IA-2(3)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IA-2(3)"
      },
      {
        "name": "NIST_SP_800-53_R4_IA-2(5)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IA-2(5)"
      },
      {
        "name": "NIST_SP_800-53_R4_IA-2(8)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IA-2(8)"
      },
      {
        "name": "NIST_SP_800-53_R4_IA-2(11)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IA-2(11)"
      },
      {
        "name": "NIST_SP_800-53_R4_IA-2(12)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IA-2(12)"
      },
      {
        "name": "NIST_SP_800-53_R4_IA-3",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IA-3"
      },
      {
        "name": "NIST_SP_800-53_R4_IA-4",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IA-4"
      },
      {
        "name": "NIST_SP_800-53_R4_IA-4(4)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IA-4(4)"
      },
      {
        "name": "NIST_SP_800-53_R4_IA-5",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IA-5"
      },
      {
        "name": "NIST_SP_800-53_R4_IA-5(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IA-5(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_IA-5(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IA-5(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_IA-5(3)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IA-5(3)"
      },
      {
        "name": "NIST_SP_800-53_R4_IA-5(4)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IA-5(4)"
      },
      {
        "name": "NIST_SP_800-53_R4_IA-5(6)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IA-5(6)"
      },
      {
        "name": "NIST_SP_800-53_R4_IA-5(7)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IA-5(7)"
      },
      {
        "name": "NIST_SP_800-53_R4_IA-5(11)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IA-5(11)"
      },
      {
        "name": "NIST_SP_800-53_R4_IA-6",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IA-6"
      },
      {
        "name": "NIST_SP_800-53_R4_IA-7",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IA-7"
      },
      {
        "name": "NIST_SP_800-53_R4_IA-8",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IA-8"
      },
      {
        "name": "NIST_SP_800-53_R4_IA-8(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IA-8(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_IA-8(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IA-8(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_IA-8(3)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IA-8(3)"
      },
      {
        "name": "NIST_SP_800-53_R4_IA-8(4)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IA-8(4)"
      },
      {
        "name": "NIST_SP_800-53_R4_IR-1",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IR-1"
      },
      {
        "name": "NIST_SP_800-53_R4_IR-2",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IR-2"
      },
      {
        "name": "NIST_SP_800-53_R4_IR-3",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IR-3"
      },
      {
        "name": "NIST_SP_800-53_R4_IR-3(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IR-3(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_IR-4",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IR-4"
      },
      {
        "name": "NIST_SP_800-53_R4_IR-4(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IR-4(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_IR-5",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IR-5"
      },
      {
        "name": "NIST_SP_800-53_R4_IR-6",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IR-6"
      },
      {
        "name": "NIST_SP_800-53_R4_IR-6(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IR-6(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_IR-7",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IR-7"
      },
      {
        "name": "NIST_SP_800-53_R4_IR-7(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IR-7(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_IR-7(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IR-7(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_IR-8",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IR-8"
      },
      {
        "name": "NIST_SP_800-53_R4_IR-9",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IR-9"
      },
      {
        "name": "NIST_SP_800-53_R4_IR-9(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IR-9(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_IR-9(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IR-9(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_IR-9(3)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IR-9(3)"
      },
      {
        "name": "NIST_SP_800-53_R4_IR-9(4)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_IR-9(4)"
      },
      {
        "name": "NIST_SP_800-53_R4_MA-1",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_MA-1"
      },
      {
        "name": "NIST_SP_800-53_R4_MA-2",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_MA-2"
      },
      {
        "name": "NIST_SP_800-53_R4_MA-3",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_MA-3"
      },
      {
        "name": "NIST_SP_800-53_R4_MA-3(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_MA-3(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_MA-3(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_MA-3(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_MA-3(3)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_MA-3(3)"
      },
      {
        "name": "NIST_SP_800-53_R4_MA-4",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_MA-4"
      },
      {
        "name": "NIST_SP_800-53_R4_MA-4(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_MA-4(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_MA-5",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_MA-5"
      },
      {
        "name": "NIST_SP_800-53_R4_MA-5(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_MA-5(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_MA-6",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_MA-6"
      },
      {
        "name": "NIST_SP_800-53_R4_MP-1",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_MP-1"
      },
      {
        "name": "NIST_SP_800-53_R4_MP-2",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_MP-2"
      },
      {
        "name": "NIST_SP_800-53_R4_MP-3",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_MP-3"
      },
      {
        "name": "NIST_SP_800-53_R4_MP-4",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_MP-4"
      },
      {
        "name": "NIST_SP_800-53_R4_MP-5",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_MP-5"
      },
      {
        "name": "NIST_SP_800-53_R4_MP-5(4)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_MP-5(4)"
      },
      {
        "name": "NIST_SP_800-53_R4_MP-6",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_MP-6"
      },
      {
        "name": "NIST_SP_800-53_R4_MP-6(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_MP-6(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_MP-7",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_MP-7"
      },
      {
        "name": "NIST_SP_800-53_R4_MP-7(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_MP-7(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_PE-1",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PE-1"
      },
      {
        "name": "NIST_SP_800-53_R4_PE-2",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PE-2"
      },
      {
        "name": "NIST_SP_800-53_R4_PE-3",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PE-3"
      },
      {
        "name": "NIST_SP_800-53_R4_PE-4",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PE-4"
      },
      {
        "name": "NIST_SP_800-53_R4_PE-5",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PE-5"
      },
      {
        "name": "NIST_SP_800-53_R4_PE-6",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PE-6"
      },
      {
        "name": "NIST_SP_800-53_R4_PE-6(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PE-6(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_PE-8",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PE-8"
      },
      {
        "name": "NIST_SP_800-53_R4_PE-9",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PE-9"
      },
      {
        "name": "NIST_SP_800-53_R4_PE-10",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PE-10"
      },
      {
        "name": "NIST_SP_800-53_R4_PE-11",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PE-11"
      },
      {
        "name": "NIST_SP_800-53_R4_PE-12",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PE-12"
      },
      {
        "name": "NIST_SP_800-53_R4_PE-13",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PE-13"
      },
      {
        "name": "NIST_SP_800-53_R4_PE-13(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PE-13(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_PE-13(3)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PE-13(3)"
      },
      {
        "name": "NIST_SP_800-53_R4_PE-14",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PE-14"
      },
      {
        "name": "NIST_SP_800-53_R4_PE-14(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PE-14(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_PE-15",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PE-15"
      },
      {
        "name": "NIST_SP_800-53_R4_PE-16",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PE-16"
      },
      {
        "name": "NIST_SP_800-53_R4_PE-17",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PE-17"
      },
      {
        "name": "NIST_SP_800-53_R4_PL-1",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PL-1"
      },
      {
        "name": "NIST_SP_800-53_R4_PL-2",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PL-2"
      },
      {
        "name": "NIST_SP_800-53_R4_PL-2(3)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PL-2(3)"
      },
      {
        "name": "NIST_SP_800-53_R4_PL-4",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PL-4"
      },
      {
        "name": "NIST_SP_800-53_R4_PL-4(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PL-4(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_PL-8",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PL-8"
      },
      {
        "name": "NIST_SP_800-53_R4_PS-1",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PS-1"
      },
      {
        "name": "NIST_SP_800-53_R4_PS-2",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PS-2"
      },
      {
        "name": "NIST_SP_800-53_R4_PS-3",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PS-3"
      },
      {
        "name": "NIST_SP_800-53_R4_PS-3(3)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PS-3(3)"
      },
      {
        "name": "NIST_SP_800-53_R4_PS-4",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PS-4"
      },
      {
        "name": "NIST_SP_800-53_R4_PS-5",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PS-5"
      },
      {
        "name": "NIST_SP_800-53_R4_PS-6",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PS-6"
      },
      {
        "name": "NIST_SP_800-53_R4_PS-7",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PS-7"
      },
      {
        "name": "NIST_SP_800-53_R4_PS-8",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_PS-8"
      },
      {
        "name": "NIST_SP_800-53_R4_RA-1",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_RA-1"
      },
      {
        "name": "NIST_SP_800-53_R4_RA-2",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_RA-2"
      },
      {
        "name": "NIST_SP_800-53_R4_RA-3",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_RA-3"
      },
      {
        "name": "NIST_SP_800-53_R4_RA-5",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_RA-5"
      },
      {
        "name": "NIST_SP_800-53_R4_RA-5(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_RA-5(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_RA-5(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_RA-5(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_RA-5(3)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_RA-5(3)"
      },
      {
        "name": "NIST_SP_800-53_R4_RA-5(5)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_RA-5(5)"
      },
      {
        "name": "NIST_SP_800-53_R4_RA-5(6)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_RA-5(6)"
      },
      {
        "name": "NIST_SP_800-53_R4_RA-5(8)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_RA-5(8)"
      },
      {
        "name": "NIST_SP_800-53_R4_SA-1",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SA-1"
      },
      {
        "name": "NIST_SP_800-53_R4_SA-2",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SA-2"
      },
      {
        "name": "NIST_SP_800-53_R4_SA-3",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SA-3"
      },
      {
        "name": "NIST_SP_800-53_R4_SA-4",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SA-4"
      },
      {
        "name": "NIST_SP_800-53_R4_SA-4(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SA-4(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_SA-4(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SA-4(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_SA-4(8)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SA-4(8)"
      },
      {
        "name": "NIST_SP_800-53_R4_SA-4(9)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SA-4(9)"
      },
      {
        "name": "NIST_SP_800-53_R4_SA-4(10)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SA-4(10)"
      },
      {
        "name": "NIST_SP_800-53_R4_SA-5",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SA-5"
      },
      {
        "name": "NIST_SP_800-53_R4_SA-8",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SA-8"
      },
      {
        "name": "NIST_SP_800-53_R4_SA-9",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SA-9"
      },
      {
        "name": "NIST_SP_800-53_R4_SA-9(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SA-9(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_SA-9(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SA-9(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_SA-9(4)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SA-9(4)"
      },
      {
        "name": "NIST_SP_800-53_R4_SA-9(5)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SA-9(5)"
      },
      {
        "name": "NIST_SP_800-53_R4_SA-10",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SA-10"
      },
      {
        "name": "NIST_SP_800-53_R4_SA-10(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SA-10(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_SA-11",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SA-11"
      },
      {
        "name": "NIST_SP_800-53_R4_SA-11(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SA-11(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_SA-11(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SA-11(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_SA-11(8)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SA-11(8)"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-1",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-1"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-2",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-2"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-4",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-4"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-5",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-5"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-6",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-6"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-7",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-7"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-7(3)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-7(3)"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-7(4)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-7(4)"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-7(5)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-7(5)"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-7(7)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-7(7)"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-7(8)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-7(8)"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-7(12)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-7(12)"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-7(13)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-7(13)"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-7(18)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-7(18)"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-8",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-8"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-8(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-8(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-10",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-10"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-12",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-12"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-12(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-12(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-12(3)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-12(3)"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-13",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-13"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-15",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-15"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-17",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-17"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-18",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-18"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-19",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-19"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-20",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-20"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-21",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-21"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-22",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-22"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-23",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-23"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-28",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-28"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-28(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-28(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_SC-39",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SC-39"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-1",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-1"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-2",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-2"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-2(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-2(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-2(3)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-2(3)"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-3",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-3"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-3(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-3(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-3(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-3(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-3(7)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-3(7)"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-4",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-4"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-4(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-4(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-4(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-4(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-4(4)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-4(4)"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-4(5)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-4(5)"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-4(14)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-4(14)"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-4(16)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-4(16)"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-4(23)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-4(23)"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-5",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-5"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-6",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-6"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-7",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-7"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-7(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-7(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-7(7)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-7(7)"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-8",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-8"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-8(1)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-8(1)"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-8(2)",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-8(2)"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-10",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-10"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-11",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-11"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-12",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-12"
      },
      {
        "name": "NIST_SP_800-53_R4_SI-16",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-16"
      }
    ],
    "parameters": {
      "IncludeArcMachines": {
        "type": "String",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc-connected servers when evaluating guest configuration policies",
          "description": "By selecting 'true,' you agree to be charged monthly per Arc connected machine; for more information, visit https://aka.ms/policy-pricing"
        }
      },
      "NotAvailableMachineState-bed48b13-6647-468e-aa2f-1af1d3f4dd40": {
        "type": "String",
        "defaultValue": "Compliant",
        "allowedValues": [
          "Compliant",
          "Non-Compliant"
        ],
        "metadata": {
          "displayName": "Status if Windows Defender is not available on machine",
          "description": "Windows Defender Exploit Guard is only available starting with Windows 10/Windows Server with update 1709. Setting this value to 'Non-Compliant' shows machines with older versions on which Windows Defender Exploit Guard is not available (such as Windows Server 2012 R2) as non-compliant. Setting this value to 'Compliant' shows these machines as compliant."
        }
      },
      "MinimumTLSVersion-5752e6d6-1206-46d8-8ab1-ecc2f71a8112": {
        "type": "String",
        "defaultValue": "1.2",
        "allowedValues": [
          "1.1",
          "1.2"
        ],
        "metadata": {
          "displayName": "Minimum TLS version for Windows web servers",
          "description": "Windows web servers with lower TLS versions will be assessed as non-compliant"
        }
      },
      "requiredRetentionDays": {
        "type": "String",
        "defaultValue": "365",
        "metadata": {
          "displayName": "Required retention period (days) for resource logs"
        }
      },
      "effect-febd0533-8e55-448f-b837-bd0e06f16469": {
        "type": "String",
        "defaultValue": "audit",
        "allowedValues": [
          "audit",
          "deny",
          "disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Kubernetes cluster containers should only use allowed images",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "excludedNamespaces": {
        "type": "Array",
        "defaultValue": [
          "kube-system",
          "gatekeeper-system",
          "azure-arc"
        ],
        "metadata": {
          "displayName": "Kubernetes namespaces excluded from evaluation of Kubernetes cluster policies in this initiative",
          "description": "List of Kubernetes namespaces to exclude from policy evaluation"
        }
      },
      "namespaces": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Kubernetes namespaces included for evaluation of Kubernetes cluster policies in this initiative",
          "description": "List of Kubernetes namespaces to (only) include for policy evaluation; an empty list will result in policies evaluated on all resources in all namespaces"
        }
      },
      "labelSelector": {
        "type": "Object",
        "defaultValue": {},
        "metadata": {
          "displayName": "Kubernetes label selector for resources included for evaluation of Kubernetes cluster policies in this initiative",
          "description": "Label query to select Kubernetes resources to include for policy evaluation; an empty label selector will result in policies evaluated on all Kubernetes resources"
        }
      },
      "allowedContainerImagesRegex-febd0533-8e55-448f-b837-bd0e06f16469": {
        "type": "String",
        "defaultValue": "^(.+){0}$",
        "metadata": {
          "displayName": "Allowed container images for Kubernetes clusters",
          "description": "Regular expression used to match allowed container images in a Kubernetes cluster; Ex: allow any Azure Container Registry image by matching partial path: ^.+azurecr.io/.+$"
        }
      },
      "effect-95edb821-ddaf-4404-9732-666045e056b4": {
        "type": "String",
        "defaultValue": "audit",
        "allowedValues": [
          "audit",
          "deny",
          "disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Kubernetes cluster should not allow privileged containers",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "excludedContainers-95edb821-ddaf-4404-9732-666045e056b4": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Kubernetes containers excluded from evaluation of policy: Kubernetes cluster should not allow privileged containers",
          "description": "The list of InitContainers and Containers to exclude from policy evaluation. The list should use the container name. Use an empty list to apply this policy to all containers in all namespaces."
        }
      },
      "effect-440b515e-a580-421e-abeb-b159a61ddcbc": {
        "type": "String",
        "defaultValue": "audit",
        "allowedValues": [
          "audit",
          "deny",
          "disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Kubernetes cluster containers should only listen on allowed ports",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "allowedContainerPortsList-440b515e-a580-421e-abeb-b159a61ddcbc": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Allowed listener ports for Kubernetes cluster containers",
          "description": "List of container ports on which Kubernetes cluster containers are allowed to listen"
        }
      },
      "effect-233a2a17-77ca-4fb1-9b6b-69223d272a44": {
        "type": "String",
        "defaultValue": "audit",
        "allowedValues": [
          "audit",
          "deny",
          "disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Kubernetes cluster services should listen only on allowed ports",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "allowedServicePortsList-233a2a17-77ca-4fb1-9b6b-69223d272a44": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Allowed listener ports for Kubernetes cluster services",
          "description": "The list of ports on which Kubernetes cluster services are allowed to listen"
        }
      },
      "effect-e345eecc-fa47-480f-9e88-67dcc122b164": {
        "type": "String",
        "defaultValue": "audit",
        "allowedValues": [
          "audit",
          "deny",
          "disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Kubernetes cluster containers CPU and memory resource limits should not exceed the specified limits",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "cpuLimit-e345eecc-fa47-480f-9e88-67dcc122b164": {
        "type": "String",
        "defaultValue": "0",
        "metadata": {
          "displayName": "Maximum allowed CPU units for containers in Kubernetes clusters",
          "description": "Ex: 200m; for more information, visit https://aka.ms/k8s-policy-pod-limits"
        }
      },
      "memoryLimit-e345eecc-fa47-480f-9e88-67dcc122b164": {
        "type": "String",
        "defaultValue": "0",
        "metadata": {
          "displayName": "Maximum allowed memory (bytes) for a container in Kubernetes clusters",
          "description": "Ex: 1Gi; for more information, visit https://aka.ms/k8s-policy-pod-limits"
        }
      },
      "effect-f06ddb64-5fa3-4b77-b166-acb36f7f6042": {
        "type": "String",
        "defaultValue": "audit",
        "allowedValues": [
          "audit",
          "deny",
          "disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Kubernetes cluster pods and containers should only run with approved user and group IDs",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "runAsUserRule-f06ddb64-5fa3-4b77-b166-acb36f7f6042": {
        "type": "String",
        "defaultValue": "MustRunAsNonRoot",
        "allowedValues": [
          "MustRunAs",
          "MustRunAsNonRoot",
          "RunAsAny"
        ],
        "metadata": {
          "displayName": "Run as user rule for Kubernetes containers",
          "description": "The 'RunAsUser' rule that containers are allowed to run with; for more information, visit https://aka.ms/kubepolicydoc"
        }
      },
      "runAsUserRanges-f06ddb64-5fa3-4b77-b166-acb36f7f6042": {
        "type": "Object",
        "defaultValue": {
          "ranges": []
        },
        "metadata": {
          "displayName": "Allowed user ID ranges for Kubernetes containers",
          "description": "User ID ranges that are allowed for containers to use; for more information, visit https://aka.ms/kubepolicydoc"
        }
      },
      "runAsGroupRule-f06ddb64-5fa3-4b77-b166-acb36f7f6042": {
        "type": "String",
        "defaultValue": "RunAsAny",
        "allowedValues": [
          "MustRunAs",
          "MayRunAs",
          "RunAsAny"
        ],
        "metadata": {
          "displayName": "Run as group rule for Kubernetes containers",
          "description": "The 'RunAsGroup' rule that containers are allowed to run with; for more information, visit https://aka.ms/kubepolicydoc"
        }
      },
      "runAsGroupRanges-f06ddb64-5fa3-4b77-b166-acb36f7f6042": {
        "type": "Object",
        "defaultValue": {
          "ranges": []
        },
        "metadata": {
          "displayName": "Allowed group ID ranges for Kubernetes containers",
          "description": "Group ID ranges that are allowed for containers to use; for more information, visit https://aka.ms/kubepolicydoc"
        }
      },
      "supplementalGroupsRule-f06ddb64-5fa3-4b77-b166-acb36f7f6042": {
        "type": "String",
        "defaultValue": "RunAsAny",
        "allowedValues": [
          "MustRunAs",
          "MayRunAs",
          "RunAsAny"
        ],
        "metadata": {
          "displayName": "Supplemental group rule for Kubernetes containers",
          "description": "The 'SupplementalGroups' rule that containers are allowed to run with; for more information, visit https://aka.ms/kubepolicydoc"
        }
      },
      "supplementalGroupsRanges-f06ddb64-5fa3-4b77-b166-acb36f7f6042": {
        "type": "Object",
        "defaultValue": {
          "ranges": []
        },
        "metadata": {
          "displayName": "Allowed supplemental group ID ranges for Kubernetes containers",
          "description": "Supplemental group ID ranges that are allowed for containers to use; for more information, visit https://aka.ms/kubepolicydoc"
        }
      },
      "fsGroupRule-f06ddb64-5fa3-4b77-b166-acb36f7f6042": {
        "type": "String",
        "defaultValue": "RunAsAny",
        "allowedValues": [
          "MustRunAs",
          "MayRunAs",
          "RunAsAny"
        ],
        "metadata": {
          "displayName": "File system group rule for Kubernetes containers",
          "description": "The 'FSGroup' rule that containers are allowed to run with; for more information, visit https://aka.ms/kubepolicydoc"
        }
      },
      "fsGroupRanges-f06ddb64-5fa3-4b77-b166-acb36f7f6042": {
        "type": "Object",
        "defaultValue": {
          "ranges": []
        },
        "metadata": {
          "displayName": "Allowed file system group ID ranges for Kubernetes cluster pods",
          "description": "File system group ranges that are allowed for pods to use; for more information, visit https://aka.ms/kubepolicydoc"
        }
      },
      "effect-1c6e92c9-99f0-4e55-9cf2-0c234dc48f99": {
        "type": "String",
        "defaultValue": "audit",
        "allowedValues": [
          "audit",
          "deny",
          "disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Kubernetes clusters should not allow container privilege escalation",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8": {
        "type": "String",
        "defaultValue": "audit",
        "allowedValues": [
          "audit",
          "deny",
          "disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Kubernetes cluster containers should not share host process ID or host IPC namespace",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-df49d893-a74c-421d-bc95-c663042e5b80": {
        "type": "String",
        "defaultValue": "audit",
        "allowedValues": [
          "audit",
          "deny",
          "disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Kubernetes cluster containers should run with a read only root file system",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d": {
        "type": "String",
        "defaultValue": "audit",
        "allowedValues": [
          "audit",
          "deny",
          "disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Kubernetes clusters should be accessible only over HTTPS",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-c26596ff-4d70-4e6a-9a30-c2506bd2f80c": {
        "type": "String",
        "defaultValue": "audit",
        "allowedValues": [
          "audit",
          "deny",
          "disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Kubernetes cluster containers should only use allowed capabilities",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "allowedCapabilities-c26596ff-4d70-4e6a-9a30-c2506bd2f80c": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "List of capabilities that are allowed to be added to a Kubernetes cluster container",
          "description": "Use an empty list as input to block everything"
        }
      },
      "requiredDropCapabilities-c26596ff-4d70-4e6a-9a30-c2506bd2f80c": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "The list of capabilities that must be dropped by a Kubernetes cluster container",
          "description": "For more information, visit https://aka.ms/kubepolicydoc"
        }
      },
      "effect-511f5417-5d12-434d-ab2e-816901e72a5e": {
        "type": "String",
        "defaultValue": "audit",
        "allowedValues": [
          "audit",
          "deny",
          "disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Kubernetes cluster containers should only use allowed AppArmor profiles",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "allowedProfiles-511f5417-5d12-434d-ab2e-816901e72a5e": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "The list of AppArmor profiles that containers are allowed to use",
          "description": "Ex: 'runtime/default;docker/default'; use an empty list as input to block everything; for more information, visit https://aka.ms/kubepolicydoc"
        }
      },
      "effect-82985f06-dc18-4a48-bc1c-b9f4f0098cfe": {
        "type": "String",
        "defaultValue": "audit",
        "allowedValues": [
          "audit",
          "deny",
          "disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Kubernetes cluster pods should only use approved host network and port range",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "allowHostNetwork-82985f06-dc18-4a48-bc1c-b9f4f0098cfe": {
        "type": "Boolean",
        "defaultValue": false,
        "metadata": {
          "displayName": "Allow host network usage for Kubernetes cluster pods",
          "description": "Set this value to true if pod is allowed to use host network, otherwise set to false; for more information, visit https://aka.ms/kubepolicydoc"
        }
      },
      "minPort-82985f06-dc18-4a48-bc1c-b9f4f0098cfe": {
        "type": "Integer",
        "defaultValue": 0,
        "metadata": {
          "displayName": "Minimum value in the allowable host port range that Kubernetes cluster pods can use in the host network namespace",
          "description": "For more information, visit https://aka.ms/kubepolicydoc"
        }
      },
      "maxPort-82985f06-dc18-4a48-bc1c-b9f4f0098cfe": {
        "type": "Integer",
        "defaultValue": 0,
        "metadata": {
          "displayName": "Maximum value in the allowable host port range that Kubernetes cluster pods can use in the host network namespace",
          "description": "For more information, visit https://aka.ms/kubepolicydoc"
        }
      },
      "effect-098fc59e-46c7-4d99-9b16-64990e543d75": {
        "type": "String",
        "defaultValue": "audit",
        "allowedValues": [
          "audit",
          "deny",
          "disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Kubernetes cluster pod hostPath volumes should only use allowed host paths",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "allowedHostPaths-098fc59e-46c7-4d99-9b16-64990e543d75": {
        "type": "Object",
        "defaultValue": {
          "paths": []
        },
        "metadata": {
          "displayName": "Allowed host paths for pod hostPath volumes to use",
          "description": "Use an empty paths list to block all host paths; for more information, visit https://aka.ms/kubepolicydoc"
        }
      },
      "resourceGroupName-b6e2945c-0b7b-40f5-9233-7a5323b5cdc6": {
        "type": "String",
        "defaultValue": "NetworkWatcherRG",
        "metadata": {
          "displayName": "Name of the resource group for Network Watcher",
          "description": "Name of the resource group where Network Watchers are located, Ex: NetworkWatcherRG"
        }
      },
      "includeAKSClusters-7c1b1214-f927-48bf-8882-84f0af6588b1": {
        "type": "Boolean",
        "defaultValue": false,
        "metadata": {
          "displayName": "Include AKS clusters when auditing if virtual machine scale set diagnostic logs are enabled",
          "description": "For more information, visit https://aka.ms/kubepolicydoc"
        }
      },
      "setting-a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9": {
        "type": "String",
        "defaultValue": "enabled",
        "allowedValues": [
          "enabled",
          "disabled"
        ],
        "metadata": {
          "displayName": "Required auditing setting for SQL servers"
        }
      },
      "evaluatedSkuNames-ef619a2c-cc4d-4d03-b2ba-8c94a834d85b": {
        "type": "Array",
        "defaultValue": [
          "Developer",
          "Premium"
        ],
        "allowedValues": [
          "Developer",
          "Basic",
          "Standard",
          "Premium",
          "Consumption"
        ],
        "metadata": {
          "displayName": "API Management SKUs that should use a virtual network",
          "description": "List of API Management SKUs against which this policy will be evaluated"
        }
      },
      "effect-b54ed75b-3e1a-44ac-a333-05ba39b99ff0": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Service Fabric clusters should only use Azure Active Directory for client authentication",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-71ef260a-8f18-47b7-abcb-62d0673d94dc": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Cognitive Services accounts should have local authentication methods disabled",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-055aa869-bc98-4af8-bafc-23f1ab6ffe2c": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Web Application Firewall (WAF) should be enabled for Azure Front Door Service service",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-564feb30-bf6a-4854-b4bb-0d2d2d1e6c66": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Web Application Firewall (WAF) should be enabled for Application Gateway",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Azure Cosmos DB accounts should have firewall rules",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-d9da03a1-f3c3-412a-9709-947156872263": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Azure HDInsight clusters should use encryption in transit to encrypt communication between Azure HDInsight cluster nodes",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-617c02be-7f02-4efd-8836-3180d47b6c68": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Service Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-0b60c0b2-2dc2-4e1c-b5c9-abbed971de53": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Key vaults should have purge protection enabled",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Key vaults should have soft delete enabled",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-ec068d99-e9c7-401f-8cef-5bdde4e6ccf1": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Double encryption should be enabled on Azure Data Explorer",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-c349d81b-9985-44ae-a8da-ff98d108ede8": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Azure Data Box jobs should enable double encryption for data at rest on the device",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "supportedSKUs-c349d81b-9985-44ae-a8da-ff98d108ede8": {
        "type": "Array",
        "defaultValue": [
          "DataBox",
          "DataBoxHeavy"
        ],
        "allowedValues": [
          "DataBox",
          "DataBoxHeavy"
        ],
        "metadata": {
          "displayName": "Azure Data Box SKUs that support software-based double encryption",
          "description": "The list of Azure Data Box SKUs that support software-based double encryption"
        }
      },
      "effect-3657f5a0-770e-44a3-b44e-9431ba1e9735": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Automation account variables should be encrypted",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-b4ac1030-89c5-4697-8e00-28b5ba6a8811": {
        "type": "String",
        "defaultValue": "audit",
        "allowedValues": [
          "audit",
          "deny",
          "disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Azure Stack Edge devices should use double-encryption",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-ea0dfaed-95fb-448c-934e-d6e713ce393d": {
        "type": "String",
        "defaultValue": "audit",
        "allowedValues": [
          "audit",
          "deny",
          "disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Azure Monitor Logs clusters should be created with infrastructure-encryption enabled (double encryption)",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-4733ea7b-a883-42fe-8cac-97454c2a9e4a": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Storage accounts should have infrastructure encryption",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-f4b53539-8df9-40e4-86c6-6b607703bd4e": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Disk encryption should be enabled on Azure Data Explorer",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-41425d9f-d1a5-499a-9932-f8ed8453932c": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Temp disks and cache for agent node pools in Azure Kubernetes Service clusters should be encrypted at host",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-fc4d8e41-e223-45ea-9bf5-eada37891d87": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Virtual machines and virtual machine scale sets should have encryption at host enabled",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-86efb160-8de7-451d-bc08-5d475b0aadae": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Azure Data Box jobs should use a customer-managed key to encrypt the device unlock password",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "supportedSKUs-86efb160-8de7-451d-bc08-5d475b0aadae": {
        "type": "Array",
        "defaultValue": [
          "DataBox",
          "DataBoxHeavy"
        ],
        "allowedValues": [
          "DataBox",
          "DataBoxHeavy"
        ],
        "metadata": {
          "displayName": "Azure Data Box SKUs that support customer-managed key encryption key",
          "description": "The list of Azure Data Box SKUs that support customer-managed key encryption key"
        }
      },
      "effect-4ec52d6d-beb7-40c4-9a9e-fe753254690e": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Azure data factories should be encrypted with a customer-managed key",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-64d314f6-6062-4780-a861-c23e8951bee5": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Azure HDInsight clusters should use customer-managed keys to encrypt data at rest",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-1fd32ebd-e4c3-4e13-a54a-d7422d4d95f6": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Azure HDInsight clusters should use encryption at host to encrypt data at rest",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-fa298e57-9444-42ba-bf04-86e8470e32c7": {
        "type": "String",
        "defaultValue": "audit",
        "allowedValues": [
          "audit",
          "deny",
          "disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Saved-queries in Azure Monitor should be saved in customer storage account for logs encryption",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-67121cc7-ff39-4ab8-b7e3-95b84dab487d": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Cognitive Services accounts should enable data encryption with a customer-managed key",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-1f905d99-2ab7-462c-a6b0-f709acca6c8f": {
        "type": "String",
        "defaultValue": "audit",
        "allowedValues": [
          "audit",
          "deny",
          "disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Azure Cosmos DB accounts should use customer-managed keys to encrypt data at rest",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Container registries should be encrypted with a customer-managed key",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-ba769a63-b8cc-4b2d-abf6-ac33c7204be8": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Azure Machine Learning workspaces should be encrypted with a customer-managed key",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-81e74cea-30fd-40d5-802f-d72103c2aaaa": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Azure Data Explorer encryption at rest should use a customer-managed key",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-0aa61e00-0a01-4a3c-9945-e93cffedf0e6": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Disabled",
          "Deny"
        ],
        "metadata": {
          "displayName": "Effect for policy: Azure Container Instance container group should use customer-managed key for encryption",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-47031206-ce96-41f8-861b-6a915f3de284": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: IoT Hub device provisioning service data should be encrypted using customer-managed keys (CMK)",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-87ba29ef-1ab3-4d82-b763-87fcd4f531f7": {
        "type": "String",
        "defaultValue": "audit",
        "allowedValues": [
          "audit",
          "deny",
          "disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Azure Stream Analytics jobs should use customer-managed keys to encrypt data",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-51522a96-0869-4791-82f3-981000c2c67f": {
        "type": "String",
        "defaultValue": "audit",
        "allowedValues": [
          "audit",
          "deny",
          "disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Bot Service should be encrypted with a customer-managed key",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-b5ec538c-daa0-4006-8596-35468b9148e8": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Storage account encryption scopes should use customer-managed keys to encrypt data at rest",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-56a5ee18-2ae6-4810-86f7-18e39ce5629b": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Azure Automation accounts should use customer-managed keys to encrypt data at rest",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-2e94d99a-8a36-4563-bc77-810d8893b671": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Azure Recovery Services vaults should use customer-managed keys for encrypting backup data",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "enableDoubleEncryption-2e94d99a-8a36-4563-bc77-810d8893b671": {
        "type": "Boolean",
        "defaultValue": true,
        "allowedValues": [
          true,
          false
        ],
        "metadata": {
          "displayName": "Require that double encryption is enabled on Recovery Services vaults for Backup",
          "description": "Check if double encryption is enabled on Recovery Services vaults for Backup; for more information, visit https://aka.ms/ab-infraencryption"
        }
      },
      "effect-1fafeaf6-7927-4059-a50a-8eb2a7a6f2b5": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Logic Apps Integration Service Environment should be encrypted with customer-managed keys",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-99e9ccd8-3db9-4592-b0d1-14b1715a4d8a": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Azure Batch account should use customer-managed keys to encrypt data",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-1f68a601-6e6d-4e42-babf-3f643a047ea2": {
        "type": "String",
        "defaultValue": "audit",
        "allowedValues": [
          "audit",
          "deny",
          "disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Azure Monitor Logs clusters should be encrypted with customer-managed key",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-f7d52b2d-e161-4dfa-a82b-55e564167385": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Azure Synapse workspaces should use customer-managed keys to encrypt data at rest",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-7d7be79c-23ba-4033-84dd-45e2a5ccdd67": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Both operating systems and data disks in Azure Kubernetes Service clusters should be encrypted by customer-managed keys",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-ca91455f-eace-4f96-be59-e6e2c35b4816": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Managed disks should be double encrypted with both platform-managed and customer-managed keys",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-702dd420-7fcc-42c5-afe8-4026edd20fe0": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: OS and data disks should be encrypted with a customer-managed key",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-22bee202-a82f-4305-9a2a-6d7f44d4dedb": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Only secure connections to your Azure Cache for Redis should be enabled",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-404c3081-a854-4457-ae30-26a93ef643f9": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Secure transfer to storage accounts should be enabled",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-d0793b48-0edc-4296-a390-4c75d1bdfd71": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Container registries should not allow unrestricted network access",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-7d092e0a-7acd-40d2-a975-dca21cae48c4": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Azure Cache for Redis should reside within a virtual network",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-2a1a9cdf-e04d-429a-8416-3bfb72a1b26f": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Storage accounts should restrict network access using virtual network rules",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-34c877ad-507e-4c82-993e-3452a6e0ad3c": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Storage accounts should restrict network access",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-55615ac9-af46-4a59-874e-391cc3dfb490": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Azure Key Vault should disable public network access",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-1b8ca024-1d5c-4dec-8995-b1a932b41780": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Public network access on Azure SQL Database should be disabled",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-037eea7a-bd0a-46c5-9a66-03aea78705d3": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Cognitive Services accounts should restrict network access",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-53503636-bcc9-4748-9663-5348217f160f": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Azure SignalR Service should use private link",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-40cec1dd-a100-4920-b15b-3024fe8901ab": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Azure Machine Learning workspaces should use private link",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-0725b4dd-7e76-479c-a735-68e7ee23d5ca": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Cognitive Services accounts should disable public network access",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-a049bf77-880b-470f-ba6d-9f21c530cf83": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Azure Cognitive Search service should use a SKU that supports private link",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-ee980b6d-0eca-4501-8d54-f6290fd512c3": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Azure Cognitive Search services should disable public network access",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-1d84d5fb-01f6-4d12-ba4f-4a26081d403d": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Virtual machines should be migrated to new Azure Resource Manager resources",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-37e0d2fe-28a5-43d6-a273-67d37d1f5606": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: Storage accounts should be migrated to new Azure Resource Manager resources",
          "description": "The effect determines what happens when the policy rule is evaluated to match; for more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "logAnalyticsWorkspaceId": {
        "type": "String",
        "defaultValue": "",
        "metadata": {
          "displayName": "Log Analytics workspace ID for VM agent reporting",
          "deprecated": true
        }
      },
      "listOfResourceTypes": {
        "type": "Array",
        "defaultValue": [],
        "allowedValues": [
          "Microsoft.AnalysisServices/servers",
          "Microsoft.ApiManagement/service",
          "Microsoft.Network/applicationGateways",
          "Microsoft.Automation/automationAccounts",
          "Microsoft.ContainerInstance/containerGroups",
          "Microsoft.ContainerRegistry/registries",
          "Microsoft.ContainerService/managedClusters",
          "Microsoft.Batch/batchAccounts",
          "Microsoft.Cdn/profiles/endpoints",
          "Microsoft.CognitiveServices/accounts",
          "Microsoft.DocumentDB/databaseAccounts",
          "Microsoft.DataFactory/factories",
          "Microsoft.DataLakeAnalytics/accounts",
          "Microsoft.DataLakeStore/accounts",
          "Microsoft.EventGrid/eventSubscriptions",
          "Microsoft.EventGrid/topics",
          "Microsoft.EventHub/namespaces",
          "Microsoft.Network/expressRouteCircuits",
          "Microsoft.Network/azureFirewalls",
          "Microsoft.HDInsight/clusters",
          "Microsoft.Devices/IotHubs",
          "Microsoft.KeyVault/vaults",
          "Microsoft.Network/loadBalancers",
          "Microsoft.Logic/integrationAccounts",
          "Microsoft.Logic/workflows",
          "Microsoft.DBforMySQL/servers",
          "Microsoft.Network/networkInterfaces",
          "Microsoft.Network/networkSecurityGroups",
          "Microsoft.DBforPostgreSQL/servers",
          "Microsoft.PowerBIDedicated/capacities",
          "Microsoft.Network/publicIPAddresses",
          "Microsoft.RecoveryServices/vaults",
          "Microsoft.Cache/redis",
          "Microsoft.Relay/namespaces",
          "Microsoft.Search/searchServices",
          "Microsoft.ServiceBus/namespaces",
          "Microsoft.SignalRService/SignalR",
          "Microsoft.Sql/servers/databases",
          "Microsoft.Sql/servers/elasticPools",
          "Microsoft.StreamAnalytics/streamingjobs",
          "Microsoft.TimeSeriesInsights/environments",
          "Microsoft.Network/trafficManagerProfiles",
          "Microsoft.Compute/virtualMachines",
          "Microsoft.Compute/virtualMachineScaleSets",
          "Microsoft.Network/virtualNetworks",
          "Microsoft.Network/virtualNetworkGateways"
        ],
        "metadata": {
          "displayName": "List of resource types that should have resource logs enabled",
          "deprecated": true
        }
      },
      "membersToExclude": {
        "type": "String",
        "defaultValue": "",
        "metadata": {
          "displayName": "List of users excluded from Windows VM Administrators group",
          "deprecated": true
        }
      },
      "membersToInclude": {
        "type": "String",
        "defaultValue": "",
        "metadata": {
          "displayName": "List of users that must be included in Windows VM Administrators group",
          "deprecated": true
        }
      }
    },
    "policyDefinitions": [
      {
        "policyDefinitionReferenceId": "72650e9f-97bc-4b2a-ab5f-9781a9fcecbc",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc",
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_CM-6"
        ]
      },
      {
        "policyDefinitionReferenceId": "fc9b3da7-8347-4380-8e70-0a0361d8dedd",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd",
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_CM-6"
        ]
      },
      {
        "policyDefinitionReferenceId": "bed48b13-6647-468e-aa2f-1af1d3f4dd40",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40",
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines')]"
          },
          "NotAvailableMachineState": {
            "value": "[parameters('NotAvailableMachineState-bed48b13-6647-468e-aa2f-1af1d3f4dd40')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SI-3",
          "NIST_SP_800-53_R4_SI-3(1)",
          "NIST_SP_800-53_R4_SI-16"
        ]
      },
      {
        "policyDefinitionReferenceId": "PreviewAuditLinuxVMsThatDoNotHaveThePasswdFilePermissionsSetTo0644",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e6955644-301c-44b5-a4c4-528577de6861",
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_IA-5",
          "NIST_SP_800-53_R4_IA-5(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "PreviewuditWindowsVMsThatAllowReUseOfThePrevious24Passwords",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5b054a0d-39e2-4d53-bea3-9734cad2c69b",
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_IA-5(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "PreviewShowAuditResultsFromWindowsVMsThatDoNotStorePasswordsUsingReversibleEncryption",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/da0f98fe-a24b-4ad5-af69-bd0400233661",
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_IA-5",
          "NIST_SP_800-53_R4_IA-5(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "PreviewAuditWindowsVMsThatDoNotHaveAMaximumPasswordAgeOf70Days",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4ceb8dc2-559c-478b-a15b-733fbf1e3738",
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_IA-5(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "AuditWindowsWebServersThatAreNotUsingSecureCommunicationProtocols",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112",
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines')]"
          },
          "MinimumTLSVersion": {
            "value": "[parameters('MinimumTLSVersion-5752e6d6-1206-46d8-8ab1-ecc2f71a8112')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-8",
          "NIST_SP_800-53_R4_SC-8(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "PreviewAuditWindowsVMsThatDoNotHaveAMinimumPasswordAgeOf1Day",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/237b38db-ca4d-4259-9e47-7882441ca2c0",
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_IA-5(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "PreviewAuditLinuxVMsThatAllowRemoteConnectionsFromAccountsWithoutPasswords",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ea53dbee-c6c9-4f0e-9f9e-de0039b78023",
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "PreviewAuditWindowsVMsThatDoNotHaveThePasswordComplexitySettingEnabled",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bf16e0bb-31e1-4646-8202-60a235cc7e74",
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_IA-5(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "PreviewAuditWindowsVMsThatDoNotRestrictTheMinimumPasswordLengthTo14Characters",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a2d0e922-65d0-40c4-8f87-ea6da2d307a2",
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_IA-5(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "PreviewAuditLinuxVMsThatHaveAccountsWithoutPasswords",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f6ec09a3-78bf-4f8f-99dc-6c77182d0f99",
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AC-3"
        ]
      },
      {
        "policyDefinitionReferenceId": "f9be5368-9bf5-4b84-9e0a-7850da98bb46",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46",
        "parameters": {
          "requiredRetentionDays": {
            "value": "[parameters('requiredRetentionDays')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AU-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "f8d36e2f-389b-4ee4-898d-21aeb69a0f45",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45",
        "parameters": {
          "requiredRetentionDays": {
            "value": "[parameters('requiredRetentionDays')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AU-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "b4330a05-a843-4bc8-bf9a-cacce50c67f4",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4",
        "parameters": {
          "requiredRetentionDays": {
            "value": "[parameters('requiredRetentionDays')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AU-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "34f95f76-5386-4de7-b824-0d8478470c9d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d",
        "parameters": {
          "requiredRetentionDays": {
            "value": "[parameters('requiredRetentionDays')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AU-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "cf820ca0-f99e-4f3e-84fb-66e913812d21",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21",
        "parameters": {
          "requiredRetentionDays": {
            "value": "[parameters('requiredRetentionDays')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AU-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "83a214f7-d01a-484b-91a9-ed54470c9a6a",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a",
        "parameters": {
          "requiredRetentionDays": {
            "value": "[parameters('requiredRetentionDays')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AU-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "057ef27e-665e-4328-8ea3-04b3122bd9fb",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb",
        "parameters": {
          "requiredRetentionDays": {
            "value": "[parameters('requiredRetentionDays')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AU-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "c95c74d9-38fe-4f0d-af86-0c7d626a315c",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c",
        "parameters": {
          "requiredRetentionDays": {
            "value": "[parameters('requiredRetentionDays')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AU-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "428256e6-1fac-4f48-a757-df34c2b3336d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d",
        "parameters": {
          "requiredRetentionDays": {
            "value": "[parameters('requiredRetentionDays')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AU-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "febd0533-8e55-448f-b837-bd0e06f16469",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-febd0533-8e55-448f-b837-bd0e06f16469')]"
          },
          "excludedNamespaces": {
            "value": "[parameters('excludedNamespaces')]"
          },
          "namespaces": {
            "value": "[parameters('namespaces')]"
          },
          "labelSelector": {
            "value": "[parameters('labelSelector')]"
          },
          "allowedContainerImagesRegex": {
            "value": "[parameters('allowedContainerImagesRegex-febd0533-8e55-448f-b837-bd0e06f16469')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_CM-6"
        ]
      },
      {
        "policyDefinitionReferenceId": "95edb821-ddaf-4404-9732-666045e056b4",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-95edb821-ddaf-4404-9732-666045e056b4')]"
          },
          "excludedNamespaces": {
            "value": "[parameters('excludedNamespaces')]"
          },
          "namespaces": {
            "value": "[parameters('namespaces')]"
          },
          "labelSelector": {
            "value": "[parameters('labelSelector')]"
          },
          "excludedContainers": {
            "value": "[parameters('excludedContainers-95edb821-ddaf-4404-9732-666045e056b4')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_CM-6"
        ]
      },
      {
        "policyDefinitionReferenceId": "440b515e-a580-421e-abeb-b159a61ddcbc",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-440b515e-a580-421e-abeb-b159a61ddcbc')]"
          },
          "excludedNamespaces": {
            "value": "[parameters('excludedNamespaces')]"
          },
          "namespaces": {
            "value": "[parameters('namespaces')]"
          },
          "labelSelector": {
            "value": "[parameters('labelSelector')]"
          },
          "allowedContainerPortsList": {
            "value": "[parameters('allowedContainerPortsList-440b515e-a580-421e-abeb-b159a61ddcbc')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_CM-6"
        ]
      },
      {
        "policyDefinitionReferenceId": "233a2a17-77ca-4fb1-9b6b-69223d272a44",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-233a2a17-77ca-4fb1-9b6b-69223d272a44')]"
          },
          "excludedNamespaces": {
            "value": "[parameters('excludedNamespaces')]"
          },
          "namespaces": {
            "value": "[parameters('namespaces')]"
          },
          "labelSelector": {
            "value": "[parameters('labelSelector')]"
          },
          "allowedServicePortsList": {
            "value": "[parameters('allowedServicePortsList-233a2a17-77ca-4fb1-9b6b-69223d272a44')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_CM-6"
        ]
      },
      {
        "policyDefinitionReferenceId": "e345eecc-fa47-480f-9e88-67dcc122b164",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-e345eecc-fa47-480f-9e88-67dcc122b164')]"
          },
          "excludedNamespaces": {
            "value": "[parameters('excludedNamespaces')]"
          },
          "namespaces": {
            "value": "[parameters('namespaces')]"
          },
          "labelSelector": {
            "value": "[parameters('labelSelector')]"
          },
          "cpuLimit": {
            "value": "[parameters('cpuLimit-e345eecc-fa47-480f-9e88-67dcc122b164')]"
          },
          "memoryLimit": {
            "value": "[parameters('memoryLimit-e345eecc-fa47-480f-9e88-67dcc122b164')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_CM-6"
        ]
      },
      {
        "policyDefinitionReferenceId": "f06ddb64-5fa3-4b77-b166-acb36f7f6042",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-f06ddb64-5fa3-4b77-b166-acb36f7f6042')]"
          },
          "excludedNamespaces": {
            "value": "[parameters('excludedNamespaces')]"
          },
          "namespaces": {
            "value": "[parameters('namespaces')]"
          },
          "labelSelector": {
            "value": "[parameters('labelSelector')]"
          },
          "runAsUserRule": {
            "value": "[parameters('runAsUserRule-f06ddb64-5fa3-4b77-b166-acb36f7f6042')]"
          },
          "runAsUserRanges": {
            "value": "[parameters('runAsUserRanges-f06ddb64-5fa3-4b77-b166-acb36f7f6042')]"
          },
          "runAsGroupRule": {
            "value": "[parameters('runAsGroupRule-f06ddb64-5fa3-4b77-b166-acb36f7f6042')]"
          },
          "runAsGroupRanges": {
            "value": "[parameters('runAsGroupRanges-f06ddb64-5fa3-4b77-b166-acb36f7f6042')]"
          },
          "supplementalGroupsRule": {
            "value": "[parameters('supplementalGroupsRule-f06ddb64-5fa3-4b77-b166-acb36f7f6042')]"
          },
          "supplementalGroupsRanges": {
            "value": "[parameters('supplementalGroupsRanges-f06ddb64-5fa3-4b77-b166-acb36f7f6042')]"
          },
          "fsGroupRule": {
            "value": "[parameters('fsGroupRule-f06ddb64-5fa3-4b77-b166-acb36f7f6042')]"
          },
          "fsGroupRanges": {
            "value": "[parameters('fsGroupRanges-f06ddb64-5fa3-4b77-b166-acb36f7f6042')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_CM-6"
        ]
      },
      {
        "policyDefinitionReferenceId": "1c6e92c9-99f0-4e55-9cf2-0c234dc48f99",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-1c6e92c9-99f0-4e55-9cf2-0c234dc48f99')]"
          },
          "excludedNamespaces": {
            "value": "[parameters('excludedNamespaces')]"
          },
          "namespaces": {
            "value": "[parameters('namespaces')]"
          },
          "labelSelector": {
            "value": "[parameters('labelSelector')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_CM-6"
        ]
      },
      {
        "policyDefinitionReferenceId": "47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8')]"
          },
          "excludedNamespaces": {
            "value": "[parameters('excludedNamespaces')]"
          },
          "namespaces": {
            "value": "[parameters('namespaces')]"
          },
          "labelSelector": {
            "value": "[parameters('labelSelector')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_CM-6"
        ]
      },
      {
        "policyDefinitionReferenceId": "df49d893-a74c-421d-bc95-c663042e5b80",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-df49d893-a74c-421d-bc95-c663042e5b80')]"
          },
          "excludedNamespaces": {
            "value": "[parameters('excludedNamespaces')]"
          },
          "namespaces": {
            "value": "[parameters('namespaces')]"
          },
          "labelSelector": {
            "value": "[parameters('labelSelector')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_CM-6"
        ]
      },
      {
        "policyDefinitionReferenceId": "1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d')]"
          },
          "excludedNamespaces": {
            "value": "[parameters('excludedNamespaces')]"
          },
          "namespaces": {
            "value": "[parameters('namespaces')]"
          },
          "labelSelector": {
            "value": "[parameters('labelSelector')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-8",
          "NIST_SP_800-53_R4_SC-8(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "c26596ff-4d70-4e6a-9a30-c2506bd2f80c",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-c26596ff-4d70-4e6a-9a30-c2506bd2f80c')]"
          },
          "excludedNamespaces": {
            "value": "[parameters('excludedNamespaces')]"
          },
          "namespaces": {
            "value": "[parameters('namespaces')]"
          },
          "labelSelector": {
            "value": "[parameters('labelSelector')]"
          },
          "allowedCapabilities": {
            "value": "[parameters('allowedCapabilities-c26596ff-4d70-4e6a-9a30-c2506bd2f80c')]"
          },
          "requiredDropCapabilities": {
            "value": "[parameters('requiredDropCapabilities-c26596ff-4d70-4e6a-9a30-c2506bd2f80c')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_CM-6"
        ]
      },
      {
        "policyDefinitionReferenceId": "511f5417-5d12-434d-ab2e-816901e72a5e",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-511f5417-5d12-434d-ab2e-816901e72a5e')]"
          },
          "excludedNamespaces": {
            "value": "[parameters('excludedNamespaces')]"
          },
          "namespaces": {
            "value": "[parameters('namespaces')]"
          },
          "labelSelector": {
            "value": "[parameters('labelSelector')]"
          },
          "allowedProfiles": {
            "value": "[parameters('allowedProfiles-511f5417-5d12-434d-ab2e-816901e72a5e')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_CM-6"
        ]
      },
      {
        "policyDefinitionReferenceId": "82985f06-dc18-4a48-bc1c-b9f4f0098cfe",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-82985f06-dc18-4a48-bc1c-b9f4f0098cfe')]"
          },
          "excludedNamespaces": {
            "value": "[parameters('excludedNamespaces')]"
          },
          "namespaces": {
            "value": "[parameters('namespaces')]"
          },
          "labelSelector": {
            "value": "[parameters('labelSelector')]"
          },
          "allowHostNetwork": {
            "value": "[parameters('allowHostNetwork-82985f06-dc18-4a48-bc1c-b9f4f0098cfe')]"
          },
          "minPort": {
            "value": "[parameters('minPort-82985f06-dc18-4a48-bc1c-b9f4f0098cfe')]"
          },
          "maxPort": {
            "value": "[parameters('maxPort-82985f06-dc18-4a48-bc1c-b9f4f0098cfe')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_CM-6"
        ]
      },
      {
        "policyDefinitionReferenceId": "098fc59e-46c7-4d99-9b16-64990e543d75",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-098fc59e-46c7-4d99-9b16-64990e543d75')]"
          },
          "excludedNamespaces": {
            "value": "[parameters('excludedNamespaces')]"
          },
          "namespaces": {
            "value": "[parameters('namespaces')]"
          },
          "labelSelector": {
            "value": "[parameters('labelSelector')]"
          },
          "allowedHostPaths": {
            "value": "[parameters('allowedHostPaths-098fc59e-46c7-4d99-9b16-64990e543d75')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_CM-6"
        ]
      },
      {
        "policyDefinitionReferenceId": "b6e2945c-0b7b-40f5-9233-7a5323b5cdc6",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6",
        "parameters": {
          "resourceGroupName": {
            "value": "[parameters('resourceGroupName-b6e2945c-0b7b-40f5-9233-7a5323b5cdc6')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AU-6",
          "NIST_SP_800-53_R4_AU-12",
          "NIST_SP_800-53_R4_SI-4"
        ]
      },
      {
        "policyDefinitionReferenceId": "7c1b1214-f927-48bf-8882-84f0af6588b1",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1",
        "parameters": {
          "includeAKSClusters": {
            "value": "[parameters('includeAKSClusters-7c1b1214-f927-48bf-8882-84f0af6588b1')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AU-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "AuditSqlServerLevelAuditingSettings",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9",
        "parameters": {
          "setting": {
            "value": "[parameters('setting-a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AU-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "ef619a2c-cc4d-4d03-b2ba-8c94a834d85b",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b",
        "parameters": {
          "evaluatedSkuNames": {
            "value": "[parameters('evaluatedSkuNames-ef619a2c-cc4d-4d03-b2ba-8c94a834d85b')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "ServiceFabricClustersShouldOnlyUseAzureActiveDirectoryForClientAuthentication",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-b54ed75b-3e1a-44ac-a333-05ba39b99ff0')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AC-2",
          "NIST_SP_800-53_R4_AC-2(1)",
          "NIST_SP_800-53_R4_AC-2(7)",
          "NIST_SP_800-53_R4_AC-3",
          "NIST_SP_800-53_R4_IA-2",
          "NIST_SP_800-53_R4_IA-4"
        ]
      },
      {
        "policyDefinitionReferenceId": "71ef260a-8f18-47b7-abcb-62d0673d94dc",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/71ef260a-8f18-47b7-abcb-62d0673d94dc",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-71ef260a-8f18-47b7-abcb-62d0673d94dc')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AC-2",
          "NIST_SP_800-53_R4_AC-2(1)",
          "NIST_SP_800-53_R4_AC-2(7)",
          "NIST_SP_800-53_R4_AC-3",
          "NIST_SP_800-53_R4_IA-2",
          "NIST_SP_800-53_R4_IA-4"
        ]
      },
      {
        "policyDefinitionReferenceId": "055aa869-bc98-4af8-bafc-23f1ab6ffe2c",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-055aa869-bc98-4af8-bafc-23f1ab6ffe2c')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-5",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "564feb30-bf6a-4854-b4bb-0d2d2d1e6c66",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-564feb30-bf6a-4854-b4bb-0d2d2d1e6c66')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-5",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "d9da03a1-f3c3-412a-9709-947156872263",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d9da03a1-f3c3-412a-9709-947156872263",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-d9da03a1-f3c3-412a-9709-947156872263')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-8",
          "NIST_SP_800-53_R4_SC-8(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "617c02be-7f02-4efd-8836-3180d47b6c68",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-617c02be-7f02-4efd-8836-3180d47b6c68')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-28",
          "NIST_SP_800-53_R4_SC-28(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "0b60c0b2-2dc2-4e1c-b5c9-abbed971de53",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-0b60c0b2-2dc2-4e1c-b5c9-abbed971de53')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_CP-9"
        ]
      },
      {
        "policyDefinitionReferenceId": "1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_CP-9"
        ]
      },
      {
        "policyDefinitionReferenceId": "ec068d99-e9c7-401f-8cef-5bdde4e6ccf1",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ec068d99-e9c7-401f-8cef-5bdde4e6ccf1",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-ec068d99-e9c7-401f-8cef-5bdde4e6ccf1')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-28",
          "NIST_SP_800-53_R4_SC-28(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "c349d81b-9985-44ae-a8da-ff98d108ede8",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c349d81b-9985-44ae-a8da-ff98d108ede8",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-c349d81b-9985-44ae-a8da-ff98d108ede8')]"
          },
          "supportedSKUs": {
            "value": "[parameters('supportedSKUs-c349d81b-9985-44ae-a8da-ff98d108ede8')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-28",
          "NIST_SP_800-53_R4_SC-28(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "3657f5a0-770e-44a3-b44e-9431ba1e9735",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-3657f5a0-770e-44a3-b44e-9431ba1e9735')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-28",
          "NIST_SP_800-53_R4_SC-28(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "b4ac1030-89c5-4697-8e00-28b5ba6a8811",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b4ac1030-89c5-4697-8e00-28b5ba6a8811",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-b4ac1030-89c5-4697-8e00-28b5ba6a8811')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-28",
          "NIST_SP_800-53_R4_SC-28(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "ea0dfaed-95fb-448c-934e-d6e713ce393d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-ea0dfaed-95fb-448c-934e-d6e713ce393d')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-28",
          "NIST_SP_800-53_R4_SC-28(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "4733ea7b-a883-42fe-8cac-97454c2a9e4a",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4733ea7b-a883-42fe-8cac-97454c2a9e4a",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-4733ea7b-a883-42fe-8cac-97454c2a9e4a')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-28",
          "NIST_SP_800-53_R4_SC-28(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "f4b53539-8df9-40e4-86c6-6b607703bd4e",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f4b53539-8df9-40e4-86c6-6b607703bd4e",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-f4b53539-8df9-40e4-86c6-6b607703bd4e')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-28",
          "NIST_SP_800-53_R4_SC-28(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "41425d9f-d1a5-499a-9932-f8ed8453932c",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/41425d9f-d1a5-499a-9932-f8ed8453932c",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-41425d9f-d1a5-499a-9932-f8ed8453932c')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-28",
          "NIST_SP_800-53_R4_SC-28(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "fc4d8e41-e223-45ea-9bf5-eada37891d87",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fc4d8e41-e223-45ea-9bf5-eada37891d87",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-fc4d8e41-e223-45ea-9bf5-eada37891d87')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-28",
          "NIST_SP_800-53_R4_SC-28(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "86efb160-8de7-451d-bc08-5d475b0aadae",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/86efb160-8de7-451d-bc08-5d475b0aadae",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-86efb160-8de7-451d-bc08-5d475b0aadae')]"
          },
          "supportedSKUs": {
            "value": "[parameters('supportedSKUs-86efb160-8de7-451d-bc08-5d475b0aadae')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "4ec52d6d-beb7-40c4-9a9e-fe753254690e",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4ec52d6d-beb7-40c4-9a9e-fe753254690e",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-4ec52d6d-beb7-40c4-9a9e-fe753254690e')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "64d314f6-6062-4780-a861-c23e8951bee5",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/64d314f6-6062-4780-a861-c23e8951bee5",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-64d314f6-6062-4780-a861-c23e8951bee5')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "1fd32ebd-e4c3-4e13-a54a-d7422d4d95f6",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1fd32ebd-e4c3-4e13-a54a-d7422d4d95f6",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-1fd32ebd-e4c3-4e13-a54a-d7422d4d95f6')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "fa298e57-9444-42ba-bf04-86e8470e32c7",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-fa298e57-9444-42ba-bf04-86e8470e32c7')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "67121cc7-ff39-4ab8-b7e3-95b84dab487d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-67121cc7-ff39-4ab8-b7e3-95b84dab487d')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "1f905d99-2ab7-462c-a6b0-f709acca6c8f",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-1f905d99-2ab7-462c-a6b0-f709acca6c8f')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "ba769a63-b8cc-4b2d-abf6-ac33c7204be8",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-ba769a63-b8cc-4b2d-abf6-ac33c7204be8')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "81e74cea-30fd-40d5-802f-d72103c2aaaa",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/81e74cea-30fd-40d5-802f-d72103c2aaaa",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-81e74cea-30fd-40d5-802f-d72103c2aaaa')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "0aa61e00-0a01-4a3c-9945-e93cffedf0e6",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0aa61e00-0a01-4a3c-9945-e93cffedf0e6",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-0aa61e00-0a01-4a3c-9945-e93cffedf0e6')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "47031206-ce96-41f8-861b-6a915f3de284",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/47031206-ce96-41f8-861b-6a915f3de284",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-47031206-ce96-41f8-861b-6a915f3de284')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "87ba29ef-1ab3-4d82-b763-87fcd4f531f7",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/87ba29ef-1ab3-4d82-b763-87fcd4f531f7",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-87ba29ef-1ab3-4d82-b763-87fcd4f531f7')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "51522a96-0869-4791-82f3-981000c2c67f",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-51522a96-0869-4791-82f3-981000c2c67f')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "b5ec538c-daa0-4006-8596-35468b9148e8",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b5ec538c-daa0-4006-8596-35468b9148e8",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-b5ec538c-daa0-4006-8596-35468b9148e8')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "56a5ee18-2ae6-4810-86f7-18e39ce5629b",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/56a5ee18-2ae6-4810-86f7-18e39ce5629b",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-56a5ee18-2ae6-4810-86f7-18e39ce5629b')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "2e94d99a-8a36-4563-bc77-810d8893b671",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2e94d99a-8a36-4563-bc77-810d8893b671",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-2e94d99a-8a36-4563-bc77-810d8893b671')]"
          },
          "enableDoubleEncryption": {
            "value": "[parameters('enableDoubleEncryption-2e94d99a-8a36-4563-bc77-810d8893b671')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "1fafeaf6-7927-4059-a50a-8eb2a7a6f2b5",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1fafeaf6-7927-4059-a50a-8eb2a7a6f2b5",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-1fafeaf6-7927-4059-a50a-8eb2a7a6f2b5')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "99e9ccd8-3db9-4592-b0d1-14b1715a4d8a",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/99e9ccd8-3db9-4592-b0d1-14b1715a4d8a",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-99e9ccd8-3db9-4592-b0d1-14b1715a4d8a')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "1f68a601-6e6d-4e42-babf-3f643a047ea2",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-1f68a601-6e6d-4e42-babf-3f643a047ea2')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "f7d52b2d-e161-4dfa-a82b-55e564167385",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f7d52b2d-e161-4dfa-a82b-55e564167385",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-f7d52b2d-e161-4dfa-a82b-55e564167385')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "7d7be79c-23ba-4033-84dd-45e2a5ccdd67",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7d7be79c-23ba-4033-84dd-45e2a5ccdd67",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-7d7be79c-23ba-4033-84dd-45e2a5ccdd67')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "ca91455f-eace-4f96-be59-e6e2c35b4816",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ca91455f-eace-4f96-be59-e6e2c35b4816",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-ca91455f-eace-4f96-be59-e6e2c35b4816')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "702dd420-7fcc-42c5-afe8-4026edd20fe0",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/702dd420-7fcc-42c5-afe8-4026edd20fe0",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-702dd420-7fcc-42c5-afe8-4026edd20fe0')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "OnlySecureConnectionsToYourRedisCacheShouldBeEnabled",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-22bee202-a82f-4305-9a2a-6d7f44d4dedb')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-8",
          "NIST_SP_800-53_R4_SC-8(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "AuditSecureTransferToStorageAccounts",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-404c3081-a854-4457-ae30-26a93ef643f9')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_SC-8",
          "NIST_SP_800-53_R4_SC-8(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "d0793b48-0edc-4296-a390-4c75d1bdfd71",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-d0793b48-0edc-4296-a390-4c75d1bdfd71')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "7d092e0a-7acd-40d2-a975-dca21cae48c4",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-7d092e0a-7acd-40d2-a975-dca21cae48c4')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "2a1a9cdf-e04d-429a-8416-3bfb72a1b26f",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-2a1a9cdf-e04d-429a-8416-3bfb72a1b26f')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "AuditUnrestrictedNetworkAccessToStorageAccounts",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-34c877ad-507e-4c82-993e-3452a6e0ad3c')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "55615ac9-af46-4a59-874e-391cc3dfb490",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-55615ac9-af46-4a59-874e-391cc3dfb490')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "1b8ca024-1d5c-4dec-8995-b1a932b41780",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-1b8ca024-1d5c-4dec-8995-b1a932b41780')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "037eea7a-bd0a-46c5-9a66-03aea78705d3",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-037eea7a-bd0a-46c5-9a66-03aea78705d3')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "53503636-bcc9-4748-9663-5348217f160f",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-53503636-bcc9-4748-9663-5348217f160f')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "40cec1dd-a100-4920-b15b-3024fe8901ab",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-40cec1dd-a100-4920-b15b-3024fe8901ab')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "0725b4dd-7e76-479c-a735-68e7ee23d5ca",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-0725b4dd-7e76-479c-a735-68e7ee23d5ca')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "a049bf77-880b-470f-ba6d-9f21c530cf83",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a049bf77-880b-470f-ba6d-9f21c530cf83",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-a049bf77-880b-470f-ba6d-9f21c530cf83')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "ee980b6d-0eca-4501-8d54-f6290fd512c3",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ee980b6d-0eca-4501-8d54-f6290fd512c3",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-ee980b6d-0eca-4501-8d54-f6290fd512c3')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "1d84d5fb-01f6-4d12-ba4f-4a26081d403d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-1d84d5fb-01f6-4d12-ba4f-4a26081d403d')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AC-3"
        ]
      },
      {
        "policyDefinitionReferenceId": "37e0d2fe-28a5-43d6-a273-67d37d1f5606",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606",
        "parameters": {
          "effect": {
            "value": "[parameters('effect-37e0d2fe-28a5-43d6-a273-67d37d1f5606')]"
          }
        },
        "groupNames": [
          "NIST_SP_800-53_R4_AC-3"
        ]
      },
      {
        "policyDefinitionReferenceId": "DeprecatedAccountsShouldBeRemovedFromYourSubscription",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-2"
        ]
      },
      {
        "policyDefinitionReferenceId": "AnAzureActiveDirectoryAdministratorShouldBeProvisionedForSqlServers",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-2",
          "NIST_SP_800-53_R4_AC-2(1)",
          "NIST_SP_800-53_R4_AC-2(7)",
          "NIST_SP_800-53_R4_AC-3",
          "NIST_SP_800-53_R4_IA-2",
          "NIST_SP_800-53_R4_IA-4"
        ]
      },
      {
        "policyDefinitionReferenceId": "CorsShouldNotAllowEveryResourceToAccessYourWebApplication",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_CM-6"
        ]
      },
      {
        "policyDefinitionReferenceId": "ThereShouldBeMoreThanOneOwnerAssignedToYourSubscription",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-5"
        ]
      },
      {
        "policyDefinitionReferenceId": "AMaximumOf3OwnersShouldBeDesignatedForYourSubscription",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-2",
          "NIST_SP_800-53_R4_AC-6"
        ]
      },
      {
        "policyDefinitionReferenceId": "AdvancedDataSecurityShouldBeEnabledOnYourManagedInstances",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-2(12)",
          "NIST_SP_800-53_R4_AU-6",
          "NIST_SP_800-53_R4_AU-12",
          "NIST_SP_800-53_R4_IR-4",
          "NIST_SP_800-53_R4_IR-5",
          "NIST_SP_800-53_R4_RA-5",
          "NIST_SP_800-53_R4_SI-4"
        ]
      },
      {
        "policyDefinitionReferenceId": "RemoteDebuggingShouldBeTurnedOffForFunctionApp",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_CM-6"
        ]
      },
      {
        "policyDefinitionReferenceId": "AdvancedDataSecurityShouldBeEnabledOnYourSqlServers",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AU-6",
          "NIST_SP_800-53_R4_AU-12",
          "NIST_SP_800-53_R4_IR-4",
          "NIST_SP_800-53_R4_IR-5",
          "NIST_SP_800-53_R4_RA-5",
          "NIST_SP_800-53_R4_SI-4"
        ]
      },
      {
        "policyDefinitionReferenceId": "89099bee-89e0-4b26-a5f4-165451757743",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AU-11"
        ]
      },
      {
        "policyDefinitionReferenceId": "4da35fc9-c9e7-4960-aec9-797fe7d9051d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-2(12)",
          "NIST_SP_800-53_R4_AU-6",
          "NIST_SP_800-53_R4_AU-12",
          "NIST_SP_800-53_R4_CM-7",
          "NIST_SP_800-53_R4_IR-4",
          "NIST_SP_800-53_R4_IR-5",
          "NIST_SP_800-53_R4_RA-5",
          "NIST_SP_800-53_R4_SI-2",
          "NIST_SP_800-53_R4_SI-3",
          "NIST_SP_800-53_R4_SI-3(1)",
          "NIST_SP_800-53_R4_SI-4",
          "NIST_SP_800-53_R4_SI-16"
        ]
      },
      {
        "policyDefinitionReferenceId": "AdaptiveApplicationControlsShouldBeEnabledOnVirtualMachines",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_CM-7",
          "NIST_SP_800-53_R4_CM-7(2)",
          "NIST_SP_800-53_R4_CM-7(5)",
          "NIST_SP_800-53_R4_CM-10",
          "NIST_SP_800-53_R4_CM-11"
        ]
      },
      {
        "policyDefinitionReferenceId": "0ec47710-77ff-4a3d-9181-6aa50af424d0",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_CP-6",
          "NIST_SP_800-53_R4_CP-6(1)",
          "NIST_SP_800-53_R4_CP-9"
        ]
      },
      {
        "policyDefinitionReferenceId": "AuditVirtualMachinesWithoutDisasterRecoveryConfigured",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0015ea4d-51ff-4ce3-8d8c-f3f8f0179a56",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_CP-7"
        ]
      },
      {
        "policyDefinitionReferenceId": "013e242c-8828-4970-87b3-ab247555486d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_CP-9"
        ]
      },
      {
        "policyDefinitionReferenceId": "MfaShouldBeEnabledOnAccountsWithOwnerPermissionsOnYourSubscription",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-3",
          "NIST_SP_800-53_R4_IA-2",
          "NIST_SP_800-53_R4_IA-2(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "MFAShouldBeEnabledOnAccountsWithReadPermissionsOnYourSubscription",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-3",
          "NIST_SP_800-53_R4_IA-2",
          "NIST_SP_800-53_R4_IA-2(2)"
        ]
      },
      {
        "policyDefinitionReferenceId": "6646a0bd-e110-40ca-bb97-84fcee63c414",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-2(7)",
          "NIST_SP_800-53_R4_IA-2",
          "NIST_SP_800-53_R4_IA-4"
        ]
      },
      {
        "policyDefinitionReferenceId": "Prerequisite_AddSystemIdentityWhenNone",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3cf2ab00-13f1-4d0c-8971-2ac904541a7e",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-3",
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_IA-5",
          "NIST_SP_800-53_R4_IA-5(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_IR-4",
          "NIST_SP_800-53_R4_IR-5"
        ]
      },
      {
        "policyDefinitionReferenceId": "VulnerabilitiesInSecurityConfigurationOnYourVirtualMachineScaleSetsShouldBeRemediated",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_RA-5",
          "NIST_SP_800-53_R4_SI-2"
        ]
      },
      {
        "policyDefinitionReferenceId": "DDoSProtectionStandardShouldBeEnabled",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SC-5"
        ]
      },
      {
        "policyDefinitionReferenceId": "FunctionAppShouldOnlyBeAccessibleOverHttps",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SC-8",
          "NIST_SP_800-53_R4_SC-8(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "0d134df8-db83-46fb-ad72-fe0c9428c8dd",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "DiskEncryptionShouldBeAppliedOnVirtualMachines",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SC-28",
          "NIST_SP_800-53_R4_SC-28(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "SystemUpdatesOnVirtualMachineScaleSetsShouldBeInstalled",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SI-2"
        ]
      },
      {
        "policyDefinitionReferenceId": "EndpointProtectionSolutionShouldBeInstalledOnVirtualMachineScaleSets",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SI-3",
          "NIST_SP_800-53_R4_SI-3(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "DeprecatedAccountsWithOwnerPermissionsShouldBeRemovedFromYourSubscription",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-2"
        ]
      },
      {
        "policyDefinitionReferenceId": "JustInTimeNetworkAccessControlShouldBeAppliedOnVirtualMachines",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-2(12)",
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "AuditUsageOfCustomRBACRules",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-2",
          "NIST_SP_800-53_R4_AC-2(7)",
          "NIST_SP_800-53_R4_AC-6"
        ]
      },
      {
        "policyDefinitionReferenceId": "RemoteDebuggingShouldBeTurnedOffForWebApplication",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_CM-6"
        ]
      },
      {
        "policyDefinitionReferenceId": "123a3936-f020-408a-ba0c-47873faf1534",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_CM-7",
          "NIST_SP_800-53_R4_CM-7(2)",
          "NIST_SP_800-53_R4_CM-7(5)",
          "NIST_SP_800-53_R4_CM-10",
          "NIST_SP_800-53_R4_CM-11"
        ]
      },
      {
        "policyDefinitionReferenceId": "48af4db5-9b8b-401c-8e74-076be876a430",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_CP-6",
          "NIST_SP_800-53_R4_CP-6(1)",
          "NIST_SP_800-53_R4_CP-9"
        ]
      },
      {
        "policyDefinitionReferenceId": "MfaShouldBeEnabledAccountsWithWritePermissionsOnYourSubscription",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-3",
          "NIST_SP_800-53_R4_IA-2",
          "NIST_SP_800-53_R4_IA-2(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "0da106f2-4ca3-48e8-bc85-c638fe6aea8f",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-2",
          "NIST_SP_800-53_R4_AC-3",
          "NIST_SP_800-53_R4_IA-2",
          "NIST_SP_800-53_R4_IA-4"
        ]
      },
      {
        "policyDefinitionReferenceId": "Prerequisite_AddSystemIdentityWhenUser",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/497dff13-db2a-4c0f-8603-28fa3b331ab6",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-3",
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_IA-5",
          "NIST_SP_800-53_R4_IA-5(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "6e2593d9-add6-4083-9c9b-4b7d2188c899",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_IR-4",
          "NIST_SP_800-53_R4_IR-5"
        ]
      },
      {
        "policyDefinitionReferenceId": "VulnerabilitiesInSecurityConfigurationOnYourMachinesShouldBeRemediated",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_RA-5",
          "NIST_SP_800-53_R4_SI-2"
        ]
      },
      {
        "policyDefinitionReferenceId": "PreviewMonitorUnprotectedNetworkEndpointsInAzureSecurityCenter",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "WebApplicationShouldOnlyBeAccessibleOverHttps",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SC-8",
          "NIST_SP_800-53_R4_SC-8(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "048248b0-55cd-46da-b1ff-39efd52db260",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "TransparentDataEncryptionOnSqlDatabasesShouldBeEnabled",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SC-28",
          "NIST_SP_800-53_R4_SC-28(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "MonitorMissingEndpointProtectionInAzureSecurityCenter",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SI-3",
          "NIST_SP_800-53_R4_SI-3(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "ExternalAccountsWithOwnerPermissionsShouldBeRemovedFromYourSubscription",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-2"
        ]
      },
      {
        "policyDefinitionReferenceId": "RemoteDebuggingShouldBeTurnedOffForApiApp",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_CM-6"
        ]
      },
      {
        "policyDefinitionReferenceId": "358c20a6-3f9e-4f0e-97ff-c6ce485e2aac",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_CM-6"
        ]
      },
      {
        "policyDefinitionReferenceId": "82339799-d096-41ae-8538-b108becf0970",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_CP-6",
          "NIST_SP_800-53_R4_CP-6(1)",
          "NIST_SP_800-53_R4_CP-9"
        ]
      },
      {
        "policyDefinitionReferenceId": "2b9ad585-36bc-4615-b300-fd4435808332",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-2",
          "NIST_SP_800-53_R4_AC-3",
          "NIST_SP_800-53_R4_IA-2",
          "NIST_SP_800-53_R4_IA-4"
        ]
      },
      {
        "policyDefinitionReferenceId": "Prerequisite_DeployExtensionWindows",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/385f5831-96d4-41db-9a3c-cd3af78aaae6",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_IA-5",
          "NIST_SP_800-53_R4_IA-5(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "0b15565f-aa9e-48ba-8619-45960f2c314d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_IR-4",
          "NIST_SP_800-53_R4_IR-5"
        ]
      },
      {
        "policyDefinitionReferenceId": "VulnerabilitiesOnYourSqlDatabasesShouldBeRemediated",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_RA-5",
          "NIST_SP_800-53_R4_SI-2"
        ]
      },
      {
        "policyDefinitionReferenceId": "ApiAppShouldOnlyBeAccessibleOverHttps",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SC-8",
          "NIST_SP_800-53_R4_SC-8(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SC-28",
          "NIST_SP_800-53_R4_SC-28(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "SystemUpdatesShouldBeInstalledOnYourMachines",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SI-2"
        ]
      },
      {
        "policyDefinitionReferenceId": "ExternalAccountsWithReadPermissionsShouldBeRemovedFromYourSubscription",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-2"
        ]
      },
      {
        "policyDefinitionReferenceId": "e71308d3-144b-4262-b144-efdc3cc90517",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "7fe3b40f-802b-4cdd-8bd4-fd799c948cc2",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-2(12)",
          "NIST_SP_800-53_R4_AU-6",
          "NIST_SP_800-53_R4_AU-12",
          "NIST_SP_800-53_R4_IR-4",
          "NIST_SP_800-53_R4_IR-5",
          "NIST_SP_800-53_R4_RA-5",
          "NIST_SP_800-53_R4_SI-2",
          "NIST_SP_800-53_R4_SI-4"
        ]
      },
      {
        "policyDefinitionReferenceId": "d62cfe2b-3ab0-4d41-980d-76803b58ca65",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d62cfe2b-3ab0-4d41-980d-76803b58ca65",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AU-12",
          "NIST_SP_800-53_R4_SI-4"
        ]
      },
      {
        "policyDefinitionReferenceId": "0820b7b9-23aa-4725-a1ce-ae4558f718e5",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_CM-6"
        ]
      },
      {
        "policyDefinitionReferenceId": "c4d441f8-f9d9-4a9e-9cef-e82117cb3eef",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-2",
          "NIST_SP_800-53_R4_AC-3",
          "NIST_SP_800-53_R4_IA-2",
          "NIST_SP_800-53_R4_IA-4"
        ]
      },
      {
        "policyDefinitionReferenceId": "Prerequisite_DeployExtensionLinux",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/331e8ea8-378a-410f-a2e5-ae22f38bb0da",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-3",
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_IA-5",
          "NIST_SP_800-53_R4_IA-5(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_RA-5"
        ]
      },
      {
        "policyDefinitionReferenceId": "bd352bd5-2853-4985-bf0d-73806b4a5744",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_SC-5",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "ExternalAccountsWithWritePermissionsShouldBeRemovedFromYourSubscription",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-2"
        ]
      },
      {
        "policyDefinitionReferenceId": "f6de0be7-9a8a-4b8a-b349-43cf02d22f7c",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "a4fe33eb-e377-4efb-ab31-0784311bc499",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AU-12",
          "NIST_SP_800-53_R4_SI-4"
        ]
      },
      {
        "policyDefinitionReferenceId": "6fac406b-40ca-413b-bf8e-0bf964659c25",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "bb91dfba-c30d-4263-9add-9c2384e659a6",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "308fbb08-4ab8-4e67-9b29-592e93fb94fa",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-2(12)",
          "NIST_SP_800-53_R4_AU-6",
          "NIST_SP_800-53_R4_AU-12",
          "NIST_SP_800-53_R4_IR-4",
          "NIST_SP_800-53_R4_IR-5",
          "NIST_SP_800-53_R4_RA-5",
          "NIST_SP_800-53_R4_SI-2",
          "NIST_SP_800-53_R4_SI-4"
        ]
      },
      {
        "policyDefinitionReferenceId": "a3a6ea0c-e018-4933-9ef0-5aaa1501449b",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AU-12",
          "NIST_SP_800-53_R4_SI-4"
        ]
      },
      {
        "policyDefinitionReferenceId": "0a15ec92-a229-4763-bb14-0ea34a568f8d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_CM-6"
        ]
      },
      {
        "policyDefinitionReferenceId": "ae89ebca-1c92-4898-ac2c-9f63decb045c",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AU-12",
          "NIST_SP_800-53_R4_SI-4"
        ]
      },
      {
        "policyDefinitionReferenceId": "8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SC-8",
          "NIST_SP_800-53_R4_SC-8(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "0e246bcf-5f6f-4f87-bc6f-775d4712c7ea",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "c25d9a16-bc35-4e15-a7e5-9db606bf9ed4",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-2(12)",
          "NIST_SP_800-53_R4_AU-6",
          "NIST_SP_800-53_R4_AU-12",
          "NIST_SP_800-53_R4_IR-4",
          "NIST_SP_800-53_R4_IR-5",
          "NIST_SP_800-53_R4_RA-5",
          "NIST_SP_800-53_R4_SI-2",
          "NIST_SP_800-53_R4_SI-4"
        ]
      },
      {
        "policyDefinitionReferenceId": "d26f7642-7545-4e18-9b75-8c9bbdee3a9a",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AU-12",
          "NIST_SP_800-53_R4_SI-4"
        ]
      },
      {
        "policyDefinitionReferenceId": "e8cbc669-f12d-49eb-93e7-9273119e9933",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_RA-5"
        ]
      },
      {
        "policyDefinitionReferenceId": "d158790f-bfb0-486c-8631-2dc6b4e8e6af",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SC-8",
          "NIST_SP_800-53_R4_SC-8(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "523b5cd1-3e23-492f-a539-13118b6d1e3a",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-2(12)",
          "NIST_SP_800-53_R4_AU-6",
          "NIST_SP_800-53_R4_AU-12",
          "NIST_SP_800-53_R4_IR-4",
          "NIST_SP_800-53_R4_IR-5",
          "NIST_SP_800-53_R4_RA-5",
          "NIST_SP_800-53_R4_SI-2",
          "NIST_SP_800-53_R4_SI-4"
        ]
      },
      {
        "policyDefinitionReferenceId": "6ba6d016-e7c3-4842-b8f2-4992ebc0d72d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_RA-5"
        ]
      },
      {
        "policyDefinitionReferenceId": "22730e10-96f6-4aac-ad84-9383d35b5917",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "e802a67a-daf5-4436-9ea6-f6d821dd0c5d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SC-8",
          "NIST_SP_800-53_R4_SC-8(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "0564d078-92f5-4f97-8398-b9f58a51f70b",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "1b7aa243-30e4-4c9e-bca8-d0d3022b634a",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_RA-5"
        ]
      },
      {
        "policyDefinitionReferenceId": "f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SC-8",
          "NIST_SP_800-53_R4_SC-8(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "0a1302fb-a631-4106-9753-f3d494733990",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "8dfab9c4-fe7b-49ad-85e4-1e9be085358f",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-2(12)",
          "NIST_SP_800-53_R4_AU-6",
          "NIST_SP_800-53_R4_AU-12",
          "NIST_SP_800-53_R4_SI-4"
        ]
      },
      {
        "policyDefinitionReferenceId": "475aae12-b88a-4572-8b36-9b712b2b3a17",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AU-12",
          "NIST_SP_800-53_R4_SI-4"
        ]
      },
      {
        "policyDefinitionReferenceId": "0049a6b3-a662-4f3e-8635-39cf44ace45a",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0049a6b3-a662-4f3e-8635-39cf44ace45a",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_RA-5"
        ]
      },
      {
        "policyDefinitionReferenceId": "f9d614c5-c173-4d56-95a7-b4437057d193",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SC-8",
          "NIST_SP_800-53_R4_SC-8(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "7595c971-233d-4bcf-bd18-596129188c49",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "c3d20c29-b36d-48fe-808b-99a87530ad99",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-2(12)",
          "NIST_SP_800-53_R4_AU-6",
          "NIST_SP_800-53_R4_AU-12",
          "NIST_SP_800-53_R4_IR-4",
          "NIST_SP_800-53_R4_IR-5",
          "NIST_SP_800-53_R4_RA-5",
          "NIST_SP_800-53_R4_SI-2",
          "NIST_SP_800-53_R4_SI-4"
        ]
      },
      {
        "policyDefinitionReferenceId": "2f2ee1de-44aa-4762-b6bd-0893fc3f306d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AU-6",
          "NIST_SP_800-53_R4_AU-12",
          "NIST_SP_800-53_R4_SI-4"
        ]
      },
      {
        "policyDefinitionReferenceId": "399b2637-a50f-4f95-96f8-3a145476eb15",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SC-8",
          "NIST_SP_800-53_R4_SC-8(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "bdc59948-5574-49b3-bb91-76b7c986428d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-2(12)",
          "NIST_SP_800-53_R4_AU-6",
          "NIST_SP_800-53_R4_AU-12",
          "NIST_SP_800-53_R4_IR-4",
          "NIST_SP_800-53_R4_IR-5",
          "NIST_SP_800-53_R4_RA-5",
          "NIST_SP_800-53_R4_SI-2",
          "NIST_SP_800-53_R4_SI-4"
        ]
      },
      {
        "policyDefinitionReferenceId": "04c4380f-3fae-46e8-96c9-30193528f602",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AU-6",
          "NIST_SP_800-53_R4_AU-12",
          "NIST_SP_800-53_R4_SI-4"
        ]
      },
      {
        "policyDefinitionReferenceId": "4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SC-8",
          "NIST_SP_800-53_R4_SC-8(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "295fc8b1-dc9f-4f53-9c61-3f313ceab40a",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/295fc8b1-dc9f-4f53-9c61-3f313ceab40a",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "fb74e86f-d351-4b8d-b034-93da7391c01f",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fb74e86f-d351-4b8d-b034-93da7391c01f",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SC-28",
          "NIST_SP_800-53_R4_SC-28(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "e8eef0a8-67cf-4eb4-9386-14b0e78733d4",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "9a1b8c48-453a-4044-86c3-d8bfd823e4f5",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SC-8",
          "NIST_SP_800-53_R4_SC-8(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "ca610c1d-041c-4332-9d88-7ed3094967c7",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "9830b652-8523-49cc-b1b3-e17dce1127ca",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "4b90e17e-8448-49db-875e-bd83fb6f804f",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "fb893a29-21bb-418c-a157-e99480ec364c",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fb893a29-21bb-418c-a157-e99480ec364c",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SI-2"
        ]
      },
      {
        "policyDefinitionReferenceId": "1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SI-2"
        ]
      },
      {
        "policyDefinitionReferenceId": "a1ad735a-e96f-45d2-a7b2-9a4932cab7ec",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a1ad735a-e96f-45d2-a7b2-9a4932cab7ec",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SC-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "7261b898-8a84-4db8-9e04-18527132abb3",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SI-2"
        ]
      },
      {
        "policyDefinitionReferenceId": "5bb220d9-2698-4ee4-8404-b9c30c9df609",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_CM-6"
        ]
      },
      {
        "policyDefinitionReferenceId": "496223c3-ad65-4ecd-878a-bae78737e9ed",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SI-2"
        ]
      },
      {
        "policyDefinitionReferenceId": "eaebaea7-8013-4ceb-9d14-7eb32271373c",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_CM-6"
        ]
      },
      {
        "policyDefinitionReferenceId": "9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SI-2"
        ]
      },
      {
        "policyDefinitionReferenceId": "0c192fe8-9cbb-4516-85b3-0ade8bd03886",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_CM-6"
        ]
      },
      {
        "policyDefinitionReferenceId": "88999f4c-376a-45c8-bcb3-4058f713cf39",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SI-2"
        ]
      },
      {
        "policyDefinitionReferenceId": "6edd7eda-6dd8-40f7-810d-67160c639cd9",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "7008174a-fd10-4ef0-817e-fc820a951d73",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SI-2"
        ]
      },
      {
        "policyDefinitionReferenceId": "7698e800-9299-47a6-b3b6-5a0fee576eed",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "7238174a-fd10-4ef0-817e-fc820a951d73",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SI-2"
        ]
      },
      {
        "policyDefinitionReferenceId": "74c3584d-afae-46f7-a20a-6f8adba71a16",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SI-2"
        ]
      },
      {
        "policyDefinitionReferenceId": "0fda3595-9f2b-4592-8675-4231d6fa82fe",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0fda3595-9f2b-4592-8675-4231d6fa82fe",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "cddd188c-4b82-4c48-a19d-ddf74ee66a01",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cddd188c-4b82-4c48-a19d-ddf74ee66a01",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "8b0323be-cc25-4b61-935d-002c3798c6ea",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "f39f5f49-4abf-44de-8c70-0756997bfb51",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f39f5f49-4abf-44de-8c70-0756997bfb51",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "58440f8a-10c5-4151-bdce-dfbaad4a20b7",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "7803067c-7d34-46e3-8c79-0ca68fc4036d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "b8564268-eb4a-4337-89be-a19db070c59d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "df39c015-56a4-45de-b4a3-efe77bed320d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/df39c015-56a4-45de-b4a3-efe77bed320d",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "1c06e275-d63d-4540-b761-71f364c2111d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "1d320205-c6a1-4ac6-873d-46224024e8e2",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1d320205-c6a1-4ac6-873d-46224024e8e2",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AU-12"
        ]
      },
      {
        "policyDefinitionReferenceId": "72d11df1-dd8a-41f7-8925-b05b960ebafc",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_AC-4",
          "NIST_SP_800-53_R4_AC-17",
          "NIST_SP_800-53_R4_AC-17(1)",
          "NIST_SP_800-53_R4_SC-7",
          "NIST_SP_800-53_R4_SC-7(3)"
        ]
      },
      {
        "policyDefinitionReferenceId": "bf045164-79ba-4215-8f95-f8048dc1780b",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bf045164-79ba-4215-8f95-f8048dc1780b",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_CP-6",
          "NIST_SP_800-53_R4_CP-6(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "d38fc420-0735-4ef3-ac11-c806f651a570",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d38fc420-0735-4ef3-ac11-c806f651a570",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_CP-6",
          "NIST_SP_800-53_R4_CP-6(1)"
        ]
      },
      {
        "policyDefinitionReferenceId": "991310cd-e9f3-47bc-b7b6-f57b557d07db",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/991310cd-e9f3-47bc-b7b6-f57b557d07db",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SI-2"
        ]
      },
      {
        "policyDefinitionReferenceId": "e2c1c086-2d84-4019-bff3-c44ccd95113c",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e2c1c086-2d84-4019-bff3-c44ccd95113c",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SI-2"
        ]
      },
      {
        "policyDefinitionReferenceId": "8c122334-9d20-4eb8-89ea-ac9a705b74ae",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8c122334-9d20-4eb8-89ea-ac9a705b74ae",
        "parameters": {},
        "groupNames": [
          "NIST_SP_800-53_R4_SI-2"
        ]
      }
    ]
  },
  "id": "/providers/Microsoft.Authorization/policySetDefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693",
  "name": "e95f5a9f-57ad-4d03-bb0b-b1d16db93693"
}