Is it possible to check existence of condition in Azure Policy in deny policy ?

Question

Ask : Allow FileShare to be created in Azure storage account only if supportsHttpsTrafficOnly is set to true on Storage account
Below policy is not working as expected
"allOf": [
{
"not": {
"field": "Microsoft.Storage/storageAccounts/supportsHttpsTrafficOnly",
"equals": "true"
}
},
{
"allOf": [
{
"source": "action",
"like": "Microsoft.Storage/storageAccounts/fileServices/shares/*"
},
{
"field": "Microsoft.Storage/storageAccounts/fileServices/shares/enabledProtocols",
"equals": "SMB"
}
]
}
]

Answer 1

hey @-sysop-5971zr-z

would you be able to give more detail about the results you are seeing from testing the above policy?

you could also check out these Storage Account policy examples from the community repo https://github.com/Azure/Community-Policy/tree/master/Policies/Storage