Skip to main content

🧠 Azure Subscription Microsoft Defender for AI is not enabled - prod.logic.yaml🟢

Uses​

Test Results 🟢​

Generated at: 2026-11-14T12:03:45.944874118Z Open

ResultIdCondition IndexCondition TextRuntime Error
🟢microsoft-defender-for-ai-0✔️ 199✔️ CA10Z1__Azure_SQL_Server_Vulnerability_Assessmnt__r.has(COMPLIANT)✔️ null
🟢microsoft-defender-for-ai-1✔️ 300✔️ otherwise✔️ null
🟢microsoft-defender-for-ai-2✔️ 199✔️ CA10Z1__Azure_SQL_Server_Vulnerability_Assessmnt__r.has(COMPLIANT)✔️ null
🟢microsoft-defender-for-ai-3✔️ 199✔️ CA10Z1__Azure_SQL_Server_Vulnerability_Assessmnt__r.has(COMPLIANT)✔️ null
🟢microsoft-defender-for-ai-4✔️ 299✔️ CA10Z1__Azure_SQL_Server_Vulnerability_Assessmnt__r.has(UNDETERMINED)✔️ null
🟢microsoft-defender-for-ai-missing✔️ 300✔️ otherwise✔️ null

Generation Bundle​

FileMD5
Open/ce/ca/azure/subscription/microsoft-defender-for-ai/policy.yaml782EC0B02D63041F3B4C0852F6E3ED51
Open/ce/ca/azure/subscription/microsoft-defender-for-ai/prod.logic.yaml2433EAC7B4E4F2BA45212DBA0A462E50
Open/ce/ca/azure/subscription/microsoft-defender-for-ai/test-data.json3C90596D09A42D39E867A1DDDD83B080
Open/types/CA10Z1__CaAzureDefenderPlan__c/object.extracts.yaml633467A2022A23296CE19EBA90D307C4

Available Commands​

repo-manager policies generate FULL /ce/ca/azure/subscription/microsoft-defender-for-ai/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/azure/subscription/microsoft-defender-for-ai/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/azure/subscription/microsoft-defender-for-ai/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/azure/subscription/microsoft-defender-for-ai/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/azure/subscription/microsoft-defender-for-ai/prod.logic.yaml

Content​

Open File

---
inputType: CA10__CaAzureAccount__c
testData:
  - file: test-data.json
conditions:
  - status: COMPLIANT
    currentStateMessage: The subscription has the required AI Defender configuration.
    check:
      RELATED_LIST_HAS:
        relationshipName: CA10Z1__Azure_SQL_Server_Vulnerability_Assessmnt__r
        status: COMPLIANT
  - status: UNDETERMINED
    currentStateMessage: The AI Defender plan cannot be assessed.
    check:
      RELATED_LIST_HAS:
        relationshipName: CA10Z1__Azure_SQL_Server_Vulnerability_Assessmnt__r
        status: UNDETERMINED
otherwise:
  status: INCOMPLIANT
  currentStateMessage: The subscription lacks the required AI Defender configuration.
  remediationMessage: Enable the AI Defender Standard plan.
relatedLists:
  - relationshipName: CA10Z1__Azure_SQL_Server_Vulnerability_Assessmnt__r
    importExtracts:
      - file: /types/CA10Z1__CaAzureDefenderPlan__c/object.extracts.yaml
    conditions:
      - status: INAPPLICABLE
        currentStateMessage: This Defender plan is not the AI plan.
        check:
          NOT:
            arg:
              IS_EQUAL:
                left:
                  EXTRACT: CA10Z1__name__c
                right:
                  TEXT: AI
      - status: COMPLIANT
        currentStateMessage: The AI Defender configuration meets the requirement.
        check:
          IS_EQUAL:
            left:
              EXTRACT: CA10Z1__pricingTier__c
            right:
              TEXT: Standard
      - status: INCOMPLIANT
        currentStateMessage: The AI Defender configuration does not meet the requirement.
        remediationMessage: Enable the required AI Defender configuration.
        check:
          CONTAINS:
            arg:
              SET:
                itemType: TEXT
                items:
                  - Free
                  - Standard
            search:
              EXTRACT: CA10Z1__pricingTier__c
    otherwise:
      status: UNDETERMINED
      currentStateMessage: The AI Defender plan configuration is unexpected.