Can Azure Policy parse extension settings to evaluate existence condition & compliance?

Question

We want to build a policy with Deploy If Not Exists (effect) to deploy/update an extension with appropriate settings. We have the below existence condition with the last condition about the presence of a certain setting in extension settings. Is this valid? When assigning the policy to a scope, for example for a VM without the extension, the policy deploys the extension but still evaluates to be non-compliant. Thus, is to reiterate, is policy support evaluation limited to few subfields in extensions documented here ? https://github.com/maciejporebski/azure-policy-aliases/blob/master/aliases/Microsoft.Compute/virtualMachines-extensions.md

Answer 1

Hi,

It is not clear exactly what you want to achieve. May be will be good to elaborate and explain in details. Overall the link contains all the aliases for Azure VM extensions you can use in policy conditions. If certain property is not available as alias it cannot be used.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.