How does one go about applying an Azure Lifecycle Management Policy to a file name that appears(duplicated name, different file contents) in different blob directories while avoiding effecting other blobs? The file name in question is executionlogs.txt here is how…
I'm trying to run below YAML file with a job. How can I specify working directory, if I want this to trigger when there is change in any child folders? For example: below is the snippet of my working directory…
I am trying to create a azure policy that blocks resources from having tag that start's with "ABC". POLICY "parameter" :{ "tagname":{ "type":"string", "defaultValue":"ABC" } }, "policyRule" :{ "if" : { "allOf" : [ { "field":"type", "equals":"Microsoft.Storage/storageAccounts" }, { "field":"[concat('tags[',…
Hello community 🙋♂️! I'm configuring an Azure Policy to check presence of a tag on new and old ressources. Checking the presence only was quite easy: policy_rule = <<RULE { "if": { "allOf": [ { "field": "type", "equals": "Microsoft.Resources/subscriptions/resourceGroups" },…
Azure Policy can be used to define conventions that, when Policy Enforcement is enabled, will prevent non-compliant resources from being created. In scenarios where non-compliant resources need to be exempted this leads to having to coordinate several steps: Disable policy…
I have a resource whitelist policy defined as follows: { "properties": { "displayName": "Deny resource creation if not in whitelist", "policyType": "Custom", "mode": "Indexed", "description": "This policy denies the creation resources which are not allowed in the whitelist.", "policyRule": {…
I have a requirement to customize the contributor role at Azure Subscription level, such that, people added to that customized contributor role can NOT view or read the data from the storage account (under that subscription). This is how i'm…
Azure Resource Policy advertises itself as: Azure Policy helps to enforce organizational standards and to assess compliance at-scale. Through its compliance dashboard, it provides an aggregated view to evaluate the overall state of the environment, with the ability to drill…
I'm exploring options for securing some Azure resources within a subscription from tampering, even by subscription owners. The intent is to standardize our subscriptions which are used by other teams for their engineering. We've considered giving teams custom RBAC roles…
Background: I am defining an API in Azure API Management. I have defined a policy on "All operations" level. This policy does a couple of things. One of the things it does is setting a variable in the context object,…