當使用者要求內容時,內容會提供給所有位置的使用者。 您可能想要依國家/地區限制您的內容存取。使用「地區篩選」功能,您便可以在 CDN 端點的特定路徑上建立規則。 您可以設定規則,以允許或封鎖所選國家/地區中的內容。重要 來自Microsoft 的標準 Azure CDN 設定檔不支援以路徑為基礎的地區篩選。
此策略定义使你能够定义满足组织的地理位置要求的允许区域。 允许的资源在参数listOfAllowedLocations(数组)中定义。 与定义匹配的资源会被拒绝。 JSON复制 {"properties": {"displayName":"Allowed locations","policyType":"BuiltIn","description":"This policy enables you to restrict the locations your organiza...
However, your practical upper limit depends on service configuration including pricing tier, service capacity, number of scale units, policy configuration, API definitions and types, number of concurrent requests, and other factors.To request a limit increase, create a support request from the ...
SQL Database should avoid using GRS backup redundancy Databases should avoid using the default geo-redundant storage for backups, if data residency rules require data to stay within a specific region. Note: Azure Policy is not enforced when creating a database using T-SQL. If not explicitly sp...
Most Azure services enable you to specify the region where your customer data will be stored and processed. Azure offers tools to help you control the location of your data—for example, you can use Azure Policy or Azure Blueprint to restrict access to selected regions for your subscription. ...
region.","metadata":{"version":"1.0.0","category":"General"},"parameters":{"listOfAllowedLocations":{"type":"Array","metadata":{"description":"The list of locations that can be specified when deploying resources.","strongType":"location","displayName":"Allowed loc...
Azure adheres to privacy standards Get details on how Azure also complies with many external privacy standards, laws, and regulations, including: theGDPR,ISO/IEC 27701,ISO/IEC 27018,EU Standard Contractual Clauses,HIPAA,HITRUST,FERPA,Japan My Number Act,Canada PIPEDA,Spain LOPD, andArgentina PDPA...
Microsoft Azure Government has developed a 9-step process to facilitate asset & configuration management with the security principles within CMMC, NIST SP 800-53 R4 and NIST SP 800-171 standards. Note this process is a starting point, as CMMC requires alignment of people, processes, policy and...
Step 1: Restrict Inbound IP Restrict Inbound IP to accept traffic from Azure Front Door's backend IP address space and Azure's infrastructure services only. External Virtual Network Type APIM For APIM instance deployed as external VNet mode, we can simply restrict the incoming IP u...
aws_foreach_region.sh - executes a templated command against each AWS region enabled for the current account, replacing {region} in each iteration. Combine with AWS CLI or scripts to find resources across regions aws_iam_*.sh - AWS IAM scripts: aws_iam_password_policy.sh - prints AWS pa...