policy
Creates, updates, deletes, gets or lists a policy resource.
Overview​
| Name | policy |
| Type | Resource |
| Id | azure.security_attestation.policy |
Fields​
The following fields are returned by SELECT queries:
- get
| Name | Datatype | Description |
|---|---|---|
token | string | An RFC7519 JSON Web Token structure whose body is an PolicyResult object. |
Methods​
The following methods are available for this resource:
| Name | Accessible by | Required Params | Optional Params | Description |
|---|---|---|---|---|
get | select | attestation_type, endpoint | Retrieves the current policy for an attestation type. Retrieves the current policy for an attestation type. | |
set | exec | attestation_type, endpoint | Sets the policy for a given attestation type. Sets the policy for a given attestation type. | |
reset | exec | attestation_type, endpoint | Resets the attestation policy for the specified tenant and reverts to the default policy. Resets the attestation policy for the specified tenant and reverts to the default policy. |
Parameters​
Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.
| Name | Datatype | Description |
|---|---|---|
attestation_type | string | Specifies the trusted execution environment to be used to validate the evidence. Known values are: "SgxEnclave", "OpenEnclave", "AzureGuest", "SevSnpVm", "Tpm", and "TdxVm". Required. |
endpoint | string | The service endpoint host (no scheme), e.g. myaccount.table.cosmos.azure.com:443 - value of the client endpoint parameter. (default: ) |
SELECT examples​
- get
Retrieves the current policy for an attestation type. Retrieves the current policy for an attestation type.
SELECT
token
FROM azure.security_attestation.policy
WHERE attestation_type = '{{ attestation_type }}' -- required
AND endpoint = '{{ endpoint }}' -- required
;
Lifecycle Methods​
- set
- reset
Sets the policy for a given attestation type. Sets the policy for a given attestation type.
EXEC azure.security_attestation.policy.set
@attestation_type='{{ attestation_type }}' --required,
@endpoint='{{ endpoint }}' --required
;
Resets the attestation policy for the specified tenant and reverts to the default policy. Resets the attestation policy for the specified tenant and reverts to the default policy.
EXEC azure.security_attestation.policy.reset
@attestation_type='{{ attestation_type }}' --required,
@endpoint='{{ endpoint }}' --required
;