How to block Azure AI Studio from being deployed by a user

Question

Hi all, In my current project, the client doesn't want users to deploy Azure AI Studio. I have tried to block it via policy by blocking the deployment of the following: ""type": "Microsoft.CognitiveServices/accounts"". Why that type? I first deployed Azure AI Studio myself (Yes, I know it's in public preview), then I exported the template, and that's the only type that I saw in the template (Microsoft.CognitiveServices/accounts). The problem here is that, if I use that policy, it will also block other Cognitive Services. My question is, is there a way of blocking Azure AI Studio, without blocking the deployment of other services? Thank you!

Answer 1

Thank you @Abrar Adil S and @romungi-MSFT , putting together the type Microsoft.MachinelearningServices/workspaces and the kind Hub did the trick. With that policy I'm able to block Azure AI Studio, and the Machine Learning workspaces and the Cognitive services are not impacted.

    "policyRule": {
      "if": {
        "allOf": [
          {
            "field": "type",
            "equals": "Microsoft.MachineLearningServices/workspaces"
          },
          {
            "field": "kind",
            "equals": "Hub"
          }
        ]
      },

Answer 2

Hello @Paco Bernabé The type which you have specified ("type": "Microsoft.CognitiveServices/accounts") is for other Cognitive Services such as Custom Vision, Computer Vision, Language Service, Translator, Content Moderator, Content Safety etc.

For the Azure AI Studio, the "type: "Microsoft.MachineLearningServices/workspaces"

Please use the below Policy to Deny the creation of the Azure AI Studio.

{
  "mode": "All",
  "policyRule": {
    "if": {
      "allOf": [
        {
          "field": "type",
          "equals": "Microsoft.MachineLearningServices/workspaces"
        }
      ]
    },
    "then": {
      "effect": "deny"
    }
  }
}

Screenshot:

Please let me know if the problem persists, and I will be happy to offer further assistance. If the provided solution has helped in resolving the issue, please consider accepting it by clicking on the "Accept answer" button.