Apply exclusion to policy or initiative based on resource region

Question

Hi, I am configuring resource diagnostic settings via policies within initiatives.

The diagnostic settings will be configured to send to log analytics workspace and storage account in the same region as the resource.

We deploy across four regions so would like to use four initiatives applied at subscription level, one for each region with exclusions for the other regions based on the resource location. Is this possible?

Thanks

Answer 1

Hi @tbgangav-MSFT

Thanks for the message. I actually figured it out yesterday using logical operators within the policy template. https://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-logical-operators

For information of the community, I simply added the following as an example:

"policyRule": {  
  "if": {  
    "allOf": [  
      {  
        "field": "type",  
        "equals": "Microsoft.Cache/redis"  
      },  
      {  
        "field": "location",  
        "equals": "uksouth"  
      }  
    ]  
  },