Azure Policy built-ins

08/05/2025

This page is an index of documentation for Azure Policy built-in policy definitions and initiatives, and Regulatory Compliance built-ins that are available in Azure portal.

Built-ins

Azure Policy built-in policies and initiatives and the name links to the documentation.

Name	Description
Policies	Azure Policy built-in definitions.
Initiatives	Azure Policy built-in initiatives.

Regulatory Compliance

The following are the Regulatory Compliance built-ins in Azure. The name links to the documentation and you can use the ID to find the initiative in Azure Policy definitions in the portal.

Name	ID
Australian Government ISM PROTECTED	`27272c0b-c225-4cc3-b8b0-f2534b093077`
Canada Federal PBMM	`4c4a5f27-de81-430b-b4e5-9cbd50595a87`
CIS Microsoft Azure Foundations Benchmark 1.1.0	`1a5bb27d-173f-493e-9568-eb56638dde4d`
CIS Microsoft Azure Foundations Benchmark 1.3.0	`612b5213-9160-4969-8578-1518bd2a000c`
CIS Microsoft Azure Foundations Benchmark 1.4.0	`c3f5c4d9-9a1d-4a99-85c0-7f93e384d5c5`
CIS Microsoft Azure Foundations Benchmark 2.0.0	`06f19060-9e68-4070-92ca-f15cc126059e`
CMMC Level 3	`b5629c75-5c77-4422-87b9-2509e680f8de`
FedRAMP High	`d5264498-16f4-418a-b659-fa7ef418175f`
FedRAMP Moderate	`e95f5a9f-57ad-4d03-bb0b-b1d16db93693`
HIPAA HITRUST	`a169a624-5599-4385-a696-c8d643089fab`
IRS 1075 September 2016	`105e0327-6175-4eb2-9af4-1fba43bdb39d`
ISO 27001:2013	`89c6cddc-1c73-4ac1-b19c-54d1a15a42f2`
Microsoft cloud security benchmark	`1f3afdf9-d0c9-4c3d-847f-89da613e70a8`
Microsoft Cloud for Sovereignty Confidential	`03de05a4-c324-4ccd-882f-a814ea8ab9ea`
Microsoft Cloud for Sovereignty Global	`c1cbff38-87c0-4b9f-9f70-035c7a3b5523`
NIST SP 800-53 Rev. 4	`cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f`
NIST SP 800-53 Rev. 5	`179d1daa-458f-4e47-8086-2a68d0d6c38f`
NIST SP 800-171 R2	`03055927-78bd-4236-86c0-f36125a10dc9`
NL BIO Cloud Theme	`6ce73208-883e-490f-a2ac-44aac3b3687f`
PCI DSS 3.2.1	`496eeda9-8f2f-4d5e-8dfd-204f0a92ed41`
PCI DSS 4.0	`c676748e-3af9-4e22-bc28-50feed564afb`
RBI ITF Banks v2016	`d0d5578d-cc08-2b22-31e3-f525374f235a`
RBI ITF NBFC v2017	`7f89f09c-48c1-f28d-1bd5-84f3fb22f86c`
RMIT Malaysia	`97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6`
Spain ENS	`175daf90-21e1-4fec-b745-7b4c909aa94c`
System and Organization Controls (SOC) 2	`4054785f-702b-4a98-9215-009cbd58b141`
SWIFT CSP-CSCF v2021	`abf84fac-f817-a70c-14b5-47eec767458a`
SWIFT CSP-CSCF v2022	`7bc7cd6c-4114-ff31-3cac-59be3157596d`
UK OFFICIAL and UK NHS	`3937f550-eedd-4639-9c5e-294358be442e`

Regulatory Compliance Azure Government

The following are the Regulatory Compliance built-ins in Azure Government. The name links to the documentation and you can use the ID to find the initiative in Azure Policy definitions in the portal. The government initiatives use the same ID but might differ from Azure initiatives by which policy definitions are included. The initiative version numbers between Azure and Azure Government are also different.

Name	ID
CIS Microsoft Azure Foundations Benchmark v1.1.0	`1a5bb27d-173f-493e-9568-eb56638dde4d`
CIS Microsoft Azure Foundations Benchmark v1.3.0	`612b5213-9160-4969-8578-1518bd2a000c`
CMMC Level 3	`b5629c75-5c77-4422-87b9-2509e680f8de`
FedRAMP High	`d5264498-16f4-418a-b659-fa7ef418175f`
FedRAMP Moderate	`e95f5a9f-57ad-4d03-bb0b-b1d16db93693`
IRS 1075 September 2016	`105e0327-6175-4eb2-9af4-1fba43bdb39d`
ISO 27001:2013	`89c6cddc-1c73-4ac1-b19c-54d1a15a42f2`
Microsoft cloud security benchmark	`1f3afdf9-d0c9-4c3d-847f-89da613e70a8`
NIST SP 800-53 Rev. 4	`cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f`
NIST SP 800-53 Rev. 5	`179d1daa-458f-4e47-8086-2a68d0d6c38f`
NIST SP 800-171 R2	`03055927-78bd-4236-86c0-f36125a10dc9`
System and Organization Controls (SOC) 2	`4054785f-702b-4a98-9215-009cbd58b141`

Next steps

Share and collaborate on making custom policies in the GitHub community policy repository.
See the built-ins on the Azure Policy GitHub repo.
Review the Azure Policy definition structure.
Review Understanding policy effects.

Feedback

Was this page helpful?

Additional resources

Documentation

List of built-in policy initiatives - Azure Policy

List built-in policy initiatives for Azure Policy. Categories include Regulatory Compliance, Azure Machine Configuration, and more.
List of built-in policy definitions - Azure Policy

List built-in policy definitions for Azure Policy. Categories include Tags, Regulatory Compliance, Key Vault, Kubernetes, Azure Machine Configuration, and more.
Details of Azure Policy definition structure basics - Azure Policy

Describes how Azure Policy definition basics are used to establish conventions for Azure resources in your organization.
Details of the initiative definition structure - Azure Policy

Describes how policy initiative definitions are used to group policy definitions for deployment to Azure resources in your organization.
Tutorial: Build policies to enforce compliance - Azure Policy

In this tutorial, you use policies to enforce standards, control costs, maintain security, and impose enterprise-wide design principles.
Safe deployment of Azure Policy assignments - Azure Policy

Learn how to apply the safe deployment practices (SDP) framework to your Azure Policy assignments.
Azure Policy definitions effect basics - Azure Policy

Azure Policy definitions effect basics determine how compliance is managed and reported.
Get policy compliance data - Azure Policy

Azure Policy evaluations and effects determine compliance. Learn how to get the compliance details of your Azure resources.

Training

Module

Azure Policy initiatives - Training

Azure Policy initiatives are a collection of Azure policy definitions that are grouped together toward a specific goal or purpose. By consolidating multiple Azure policies into a single item, Azure Policy initiatives allow centralized control and enforcement of configurations across Azure resources.

Microsoft Ignite

Share via

Built-ins

Regulatory Compliance

Regulatory Compliance Azure Government

Next steps

Ask Learn