Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
945 questions
How can I combine two resources in a single Azure Policy?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(25.6, 87%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVM%3C/text%3E%3C/svg%3E)
Vineet Mimrot
11
Reputation points Microsoft Employee
Hey,
I need to create policy in which I need to check properties of two resources of different resource types and then take some action. Can you please tell how can I achieve it?
Or Is it possible to make GET request to a Azure Resource in the policy definition?
{count} vote
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(249.60000000000002, 39%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESD%3C/text%3E%3C/svg%3E)
Swathi Dhanwada 18,806 Reputation points Microsoft Employee2022-03-23T11:46:43.607+00:00 @Anonymous Welcome to Microsoft Q & A Community Forum. Can you please elaborate your issue by explaining your problem statement and what are you trying to achieve using Policy?
- Which two resources would you like to check ?
- What properties are you trying to verify?
- Are you trying to get your resources to be complaint with specific conditions?
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(73.60000000000001, 19%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESA%3C/text%3E%3C/svg%3E)
Shayakh Ahmed Rezoan 1 Reputation point2022-06-18T11:22:07.7+00:00 @Swathi Dhanwada lets say we want to audit the Microsoft.Storage/storageAccounts only if Microsoft.Storage/storageAccounts/supportsHttpsTrafficOnly is not enabled and Microsoft.Storage/storageAccounts/fileServices/shares child resource exist along with its property enabledProtocols.
As far as i saw we cannot audit a parent resource based on a property value from its child resource,
How you guys suggest this policy to be written?
Sign in to comment
Sign in to answer