module/ConfigurationProvider/ControlConfigurations/Services/HybridCompute.json

{
  "FeatureName": "HybridCompute",
  "Reference": "aka.ms/azsktcp/hybridcompute",
  "IsMaintenanceMode": false,
  "Controls": [
    {
      "ControlID": "Azure_HybridCompute_DP_Use_Secure_TLS_Version_Trial",
      "Description": "[Trial] Use approved version of TLS for ARC Windows Servers",
      "Id": "HybridCompute110",
      "ControlSeverity": "High",
      "Automated": "Yes",
      "ControlScanSource": "PolicyandReader",
      "MethodName": "CheckTLSVersionOnlyOnWindows",
      "DisplayName": "[Trial] Use approved version of TLS for ARC Windows Servers",
      "Category": "Encrypt data in transit",
      "ControlRequirements": "Data must be encrypted in transit and at rest",
      "Recommendation": "Check Windows Servers Minimum TLS version MUST be configured to the required minimum TLS version of 1.2",
      "CustomPolicyProperties": {
        "PolicyDefinitionIds": [ "/providers/Microsoft.Authorization/policyDefinitions/828ba269-bf7f-4082-83dd-633417bc391d" ]
      },
      "ControlSettings": {
        "ApplicableOsTypes": [
          "Windows"
        ]
      },
      "Tags": [
        "SDL",
        "Automated",
        "DP",
        "Baseline"
      ],
      "Enabled": true,
      "Rationale": "TLS provides privacy and data integrity between client and server. Using approved TLS version significantly reduces risks from security design issues and security bugs that may be present in older versions.",
      "CustomTags": [
        "Daily",
        "Trial",
        "SN:ARCWindowsServer_TLS"
      ]
    }
  ]
}