Allowing only specific Azure Virtual Machines images and restrict everything else

Question

Hi,

I know that I can use Azure policy to enforce (deny) to only use only specific images / publishers but are there ways to enforce this in Azure marketplace level so that application teams would only be allowed on use e.g Windows server 2025 and rest would be blocked?

Answer 1

Hi Bombbe,
Welcome to the Microsoft Q&A Platform! Thank you for asking your question here
Based on your query,
Do you want to allow only a specific image and block all remaining images from the Azure Marketplace? If that is the case, you can allow custom images by following the documentation provided below.
https://github.com/Azure/azure-policy/tree/master/samples/Compute/allowed-custom-images
you can deploy with Azure CLI, PowerShell, or JSON. Everything is mentioned in the documentation.

Try with Azure PowerShell
Try with Azure CLI

Pleases let me know if you need any further assistance or have any questions. I’m always available to support you and help resolve your issue as you needed.!

If you found this information helpful, please click an accepting the answer and 👍"Upvote" on my post for other community member's reference

Answer 2

Hello,

I would recommend using Private Azure Marketplace, which lets administrators govern which Microsoft partner solutions people across an organization can deploy. It does this by allowing a person to deploy only offers that the marketplace administrator approves.

https://learn.microsoft.com/en-us/marketplace/create-manage-private-azure-marketplace-new

Please Upvote and Accept the answer if it helps!