Azure Policy to replace SSD by HDD possible ?

Question

Azure Policy to replace SSD by HDD possible ?

Clément Legoupil 21

Hello everyone,

I'm discovering azure policies.

I'm administrator on my dev subscription, I would like to create a policy that will replace SSD disks of new or existing VM by HDD disks (dev env don't need SSDs), I've already create a policy that will deny SSD disks but the policy is triggered during the deployment and not at the 'Review and create' step.

I've tried to write a 'modify' policy but the error is : The policy definition 'xxxxxx' has operations referring to aliases that are not modifiable: 'Microsoft.Compute/disks/sku.name'.

Is there any way to prevent users to create VMs with SSDs ?

Thank you !

Accepted answer

0 additional answers

Your answer

Answer 1

Stanislav Zhelyazkov 26,936 MVP

Hi,
Only option is to use deny policy for this. In order to use modify effect the alias needs to be supported as modifiable. In this case it is clearly not. Keep in mind that such action as changing the sku to another requires that the VM be stopped thus this is not suitable to be modifiable (even if it was possible) as for existing resource will not work if the VM is not stopped.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Clément Legoupil 21 Reputation points

2022-12-20T13:34:57.967+00:00

Hi Stan,

Thank you for your answer.

As the policy with a deny effect stop the deployment of the VM, is there any additional action that i can add to remove resources created before the policy append ?

As example : when I create a VM with an SSD, the deployment starts, network interface is created and then the deployment stops, so yes the VM is not created and that's my goal, but is there any way to delete resources that has been created before the policy append ?

Thank you again for your answer !
Stanislav Zhelyazkov 26,936 Reputation points MVP

2022-12-20T14:41:06.143+00:00

May be you should create policy for alias Microsoft.Compute/virtualMachines/storageProfile.osDisk.managedDisk.storageAccountType as well. OS disks can be created when creating the VM without explicitly specifying Microsoft.Compute/disks resource for the OS disk. I would guess you are in that case where VM creation is started because the policy is only for disks but when OS disk is created by the virtual machine is denied due to the policy.
Clément Legoupil 21 Reputation points

2022-12-20T15:11:32.597+00:00

Thank you very much for your time.

I wil try that.

Have a nice day.

Share via

Azure Policy to replace SSD by HDD possible ?

0 additional answers

Your answer