Policy: Azure > Compute > Virtual Machine > Approved > Image > Trusted Publishers

A list of publishers whose Images are allowed to be used to launch virtual machines. Images from publishers not listed are not allowed.

Resource Types

This policy targets the following resource types:

Azure > Subscription

Primary Policy

This policy is used with the following primary policy:

Azure > Compute > Virtual Machine > Approved > Image

Controls

Azure > Compute > Virtual Machine > Approved

Policy Specification

Schema Type	`array`
Default template	`{% if $.imageTrustedPublishers.path \| length == 0 %} [] {% endif %}{% for item in $.imageTrustedPublishers.path %}- {{ item }} {% endfor %}`
Default template input	`- \| { item: subscription { turbot { id } } } - \| { imageTrustedPublishers: policyValue(resourceId:"{{ $.item.turbot.id }}" uri:"tmod:@turbot/azure-compute#/policy/types/imageTrustedPublishers") { path: value } }`

Schema Type

array

Default template

{% if $.imageTrustedPublishers.path | length == 0 %} [] {% endif %}{% for item in $.imageTrustedPublishers.path %}- {{ item }}
{% endfor %}

Default template input

- |
  {
    item: subscription {
      turbot {
        id
      }
    }
  }
- |
  {
    imageTrustedPublishers: policyValue(resourceId:"{{ $.item.turbot.id }}" uri:"tmod:@turbot/azure-compute#/policy/types/imageTrustedPublishers") {
      path: value
    }
  }

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/resourceApproved

Policy Type URI

tmod:@turbot/azure-compute#/policy/types/virtualMachineApprovedImageTrustedPublishers

GraphQL

query policyType(id: "tmod:@turbot/azure-compute#/policy/types/virtualMachineApprovedImageTrustedPublishers") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/azure-compute#/policy/types/virtualMachineApprovedImageTrustedPublishers'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/azure-compute#/policy/types/virtualMachineApprovedImageTrustedPublishers'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/azure-compute#/policy/types/virtualMachineApprovedImageTrustedPublishers"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/azure-compute#/policy/types/virtualMachineApprovedImageTrustedPublishers"