The 'azure-policy' tag is meant to be used on all questions related to authoring, assigning, and grouping of Azure Policy definitions and initiatives. This will improve the visibility of the questions to both the community and Azure Governance product team.
Questions tagged [azure-policy]
480 questions
-1
votes
1 answer
Azure Policy Guest Configuration - Find a VM with deactivated Windows Firewall
i have a short Question about the Azure Policy Guest Configuration with a Windows VM at Azure.
I would like to write a Policy to find VMs with deactivated Windows Firewall.
Can someone help me?
At Azure Policy Templates i only have found a Policy…

Phil
- 5
- 4
-1
votes
1 answer
Azure Policy - Enable Auto Shutdown at VMs
it is possible to activate the Azure VM Autoshutdown Function with an Azure Policy?
I found always articles with an DevTest Lab. But i would like to use an AZure Policy at the Production Subscription to can found VMs without an Azure AutoShutdown…

Phil
- 5
- 4
-1
votes
2 answers
How do you use the output of a terraform apply as input into another terraform variable?
Policy as code - Azure - Terraform
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/policy_definition
The output is an id. This id needs to be used as a variable for a policy…

user13696433
- 93
- 3
- 11
-1
votes
1 answer
Azure API backend service URL
In Azure API management , how to change the backend service base url for each operations in single azure api instances
i tried
operation 1 dev
operation 2 test
operation 1 and operation 2 are under same azure API
and i got error error
any one have…

arthi athithan
- 13
- 1
-1
votes
1 answer
Terraform - Importing multiple Azure KeyVault Access Policies
I have an Azure KeyVault with 4 Access Policies. Each Access Policy has its own unique ObjectId.
In trying to import our legacy Azure resources into a Terraform configuration, I've therefore create Terraform block like the below.
resource…

hitman126
- 699
- 1
- 12
- 43
-1
votes
1 answer
"InvalidTemplate"; Message Deployment template parse failed:
Getting the below error while deploying the template
Error code
InvalidTemplate
Message
Deployment template parse failed: 'Error converting value "Standard_LRS" to type…

MANIKANTA
- 1
- 4
-1
votes
1 answer
Checking for several possible values in the 'name' field in an azure policy
I have an azure policy for that enforces a naming convention for app services of 'kind' api. I got it mostly working. The policy should allow for the creation of app services that follow this format (??--api-dev, ??--api-stage, ??-*-api-prod).…

cybersnow1989
- 229
- 3
- 17
-1
votes
1 answer
Is It possible to restrict the user to display the builtInRoles in roles drop down when assigning a role to new user?
We have requirement where we need to create a role xxxx and assign to a user A. This user A can create a user but should assign only custom role xxxx to his users.
I Have created a custom role xxxx and in permissions I have excluded the…

user6264
- 175
- 1
- 7
- 22
-1
votes
2 answers
Want to change incoming request to identity or openIDConnect
I see from Microsoft Docs, they provide only these 3 basic, certificate and MSI in the policy. https://learn.microsoft.com/en-us/azure/api-management/api-management-authentication-policies#AuthenticationPolicies
Does that mean I can not accomplish…

Jasmine
- 5,186
- 16
- 62
- 114
-1
votes
1 answer
Is it possible to create Azure policy on a specific resource group ID or name
Need to create a policy in azure which should have an option to filter resource groups based on resource group ID or name. During policy assignment I should get an option to provide resource group ID or name in the Parameters.

Rajat
- 57
- 3
- 9
-1
votes
1 answer
Microsoft Azure - policy to prevent creation of resources not covered by MSDN credit
I'm trying to create an Azure policy which would deny creation of any resource that's not covered by my MSDN subscription 130€ monthly quota. What happens is that I inadvertently create a resource which is not covered by MSDN subscription monthly…

Marko
- 1,502
- 5
- 21
- 40
-2
votes
1 answer
How can Policy work alongside IaC templates?
I have a VM deployed via terraform with various tags set on it. Recently, a new "tag inheritance" Azure Policy has been assigned to the subscription containing that VM. The Policy basically says that all resources in the subscription should include…

Colin Smith
- 81
- 1
- 6
-2
votes
2 answers
Microsoft Purview - can it be used to monitor firewall rules across databases?
I have been looking for a solution, preferably native, to monitor changes to firewall rules across multiple Azure SQL databases hosted on different Azure SQL servers. While Azure Policy seemed to fit the bill initially, it later turned out to be…

Chethan S.
- 558
- 2
- 8
- 28
-2
votes
1 answer
Azure policy assignment using powershell?
How to enable two scope levels(resource group and subscription) simultaneously in azure policy using powershell?

Rama Krishna
- 7
- 2