Skip to main content

🧠 Azure Subscription Microsoft Defender AI prompt evidence is not enabled - prod.logic.yaml🟢

Uses​

Test Results 🟢​

Generated at: 2026-11-14T12:03:45.511462187Z Open

ResultIdCondition IndexCondition TextRuntime Error
🟢microsoft-defender-ai-prompt-evidence-0✔️ 199✔️ CA10Z1__Azure_SQL_Server_Vulnerability_Assessmnt__r.has(COMPLIANT)✔️ null
🟢microsoft-defender-ai-prompt-evidence-1✔️ 300✔️ otherwise✔️ null
🟢microsoft-defender-ai-prompt-evidence-2✔️ 300✔️ otherwise✔️ null
🟢microsoft-defender-ai-prompt-evidence-3✔️ 300✔️ otherwise✔️ null
🟢microsoft-defender-ai-prompt-evidence-4✔️ 299✔️ CA10Z1__Azure_SQL_Server_Vulnerability_Assessmnt__r.has(UNDETERMINED)✔️ null
🟢microsoft-defender-ai-prompt-evidence-missing✔️ 300✔️ otherwise✔️ null
🟢ai-missing-extensions✔️ 299✔️ CA10Z1__Azure_SQL_Server_Vulnerability_Assessmnt__r.has(UNDETERMINED)✔️ null
🟢ai-unknown-encoding✔️ 299✔️ CA10Z1__Azure_SQL_Server_Vulnerability_Assessmnt__r.has(UNDETERMINED)✔️ null
🟢ai-conflicting-extensions✔️ 299✔️ CA10Z1__Azure_SQL_Server_Vulnerability_Assessmnt__r.has(UNDETERMINED)✔️ null

Generation Bundle​

FileMD5
Open/ce/ca/azure/subscription/microsoft-defender-ai-prompt-evidence/policy.yaml93954E3B0C8E16D778755447015B4DCE
Open/ce/ca/azure/subscription/microsoft-defender-ai-prompt-evidence/prod.logic.yamlA3F4A62F0A7741B4063ED6ECFE12C98E
Open/ce/ca/azure/subscription/microsoft-defender-ai-prompt-evidence/test-data.json782C0490CFAC558FDE67BE793C577174
Open/types/CA10Z1__CaAzureDefenderPlan__c/object.extracts.yaml633467A2022A23296CE19EBA90D307C4

Available Commands​

repo-manager policies generate FULL /ce/ca/azure/subscription/microsoft-defender-ai-prompt-evidence/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/azure/subscription/microsoft-defender-ai-prompt-evidence/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/azure/subscription/microsoft-defender-ai-prompt-evidence/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/azure/subscription/microsoft-defender-ai-prompt-evidence/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/azure/subscription/microsoft-defender-ai-prompt-evidence/prod.logic.yaml

Content​

Open File

---
inputType: CA10__CaAzureAccount__c
testData:
  - file: test-data.json
conditions:
  - status: COMPLIANT
    currentStateMessage: The subscription has the required AI Defender configuration.
    check:
      RELATED_LIST_HAS:
        relationshipName: CA10Z1__Azure_SQL_Server_Vulnerability_Assessmnt__r
        status: COMPLIANT
  - status: UNDETERMINED
    currentStateMessage: The AI Defender plan cannot be assessed.
    check:
      RELATED_LIST_HAS:
        relationshipName: CA10Z1__Azure_SQL_Server_Vulnerability_Assessmnt__r
        status: UNDETERMINED
otherwise:
  status: INCOMPLIANT
  currentStateMessage: The subscription lacks the required AI Defender configuration.
  remediationMessage: Enable the AI Defender Standard plan and AIPromptEvidence extension.
relatedLists:
  - relationshipName: CA10Z1__Azure_SQL_Server_Vulnerability_Assessmnt__r
    importExtracts:
      - file: /types/CA10Z1__CaAzureDefenderPlan__c/object.extracts.yaml
    conditions:
      - status: INAPPLICABLE
        currentStateMessage: This Defender plan is not the AI plan.
        check:
          NOT:
            arg:
              IS_EQUAL:
                left:
                  EXTRACT: CA10Z1__name__c
                right:
                  TEXT: AI
      - status: INCOMPLIANT
        currentStateMessage: The AI Defender plan is on the Free tier.
        check:
          IS_EQUAL:
            left:
              EXTRACT: CA10Z1__pricingTier__c
            right:
              TEXT: Free
        remediationMessage: Enable the AI Standard plan and prompt evidence.
      - status: UNDETERMINED
        currentStateMessage: The AI Defender plan tier is unexpected.
        check:
          NOT:
            arg:
              IS_EQUAL:
                left:
                  EXTRACT: CA10Z1__pricingTier__c
                right:
                  TEXT: Standard
      - status: UNDETERMINED
        currentStateMessage: The AI extension configuration is not collected.
        check:
          IS_EMPTY:
            arg:
              EXTRACT: CA10Z1__extensions__c
      - status: COMPLIANT
        currentStateMessage: AI prompt evidence is enabled.
        check:
          JSON_QUERY_BOOLEAN:
            arg:
              EXTRACT: caJsonFrom__extensions__c
            expression: length([?name=='AIPromptEvidence']) == `1` && length([?name=='AIPromptEvidence'
              && isEnabled=='True']) == `1`
            undeterminedIf:
              evaluationError: The collected AI extensions cannot be evaluated.
              resultTypeMismatch: The AI extension query did not return a boolean.
      - status: INCOMPLIANT
        currentStateMessage: AI prompt evidence is absent or disabled.
        check:
          JSON_QUERY_BOOLEAN:
            arg:
              EXTRACT: caJsonFrom__extensions__c
            expression: length([?name=='AIPromptEvidence']) == `0` || (length([?name=='AIPromptEvidence'])
              == `1` && length([?name=='AIPromptEvidence' && isEnabled=='False']) == `1`)
            undeterminedIf:
              evaluationError: The collected AI extensions cannot be evaluated.
              resultTypeMismatch: The AI extension query did not return a boolean.
        remediationMessage: Enable AIPromptEvidence in the AI Defender plan settings.
    otherwise:
      status: UNDETERMINED
      currentStateMessage: The AI Defender plan configuration is unexpected.