Azure Blueprints
An Azure service that provides templates for quick, repeatable creation of fully governed cloud subscriptions.
70 questions
1 answer
Blueprint assignment location
Dear all, I'm trying to do what I have already done for resource and resource group location, limiting them to a subset of locations and offering a default value at the time the blueprint is assigned, what I did not find the way yet, is how to manage…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(284.8, 89%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
1 answer
Azure management book recommendation
Hello, I am just learning Azure administration and am looking for a good hands-on book covering the Azure Management portal. I will be doing a lot in the coming weeks, but right now I am concerned with ▪ Blueprints, ARMs ▪ Policy & policy…
asked 2020-07-30T19:10:34.863+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(284.8, 21%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERH%3C/text%3E%3C/svg%3E)
Rolf Hargis
1
Reputation point
commented 2020-08-03T22:16:50.733+00:00
bharathn-msft
5,086
Reputation points Microsoft Employee
2 answers
Exporting azure policy definitions
Hi, I am trying to find a script to export all existing policy definitions that are configured in our environment. I am hoping to export them into a json format that I can then place into source control for CI/CD. Does anybody know if this exists? Or…
asked 2020-06-30T19:14:22.097+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(35.2, 72%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ED%3C/text%3E%3C/svg%3E)
Dan
176
Reputation points
answered 2020-07-30T08:16:23.797+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(41.6, 16%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVR%3C/text%3E%3C/svg%3E)
vasudeva reddy
41
Reputation points
1 answer
One of the answers was accepted by the question author.
Export azure policies
HI Team, I have a requirement to export all Azure policy definitions and policy assignments to a json file, later we want to automate all these from CI/CD pipelines. Can you please help me on how to achieve this Thanks Vasudeva Reddy
asked 2020-07-27T09:31:26.927+00:00
vasudeva reddy
41
Reputation points
accepted 2020-07-28T04:31:16.883+00:00
vasudeva reddy
41
Reputation points
1 answer
Audit/Deny ipSecurityRestrictions through Azure Policy
Hi there, I'm trying to create a custom policy to match ipSecurityRestriction rules for our organisational Public IP addresses. I want to do this for Function Apps in the first instance, but once I have the policy created, I'll align it to other…
asked 2020-06-29T08:46:22.333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(92.8, 79%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECT%3C/text%3E%3C/svg%3E)
Campbell Thompson
1
Reputation point
answered 2020-06-29T14:07:46.103+00:00
DCtheGeek-MSFT
451
Reputation points Microsoft Employee
3 answers
[Azure Policy] Alias is not being recognized
Hello, I'm trying to create policy for Azure API Management Named Values. It seems that API Management has moved the naming for them from: Microsoft.ApiManagement/service/properties to: Microsoft.ApiManagement/service/namedValues And now I…
asked 2020-06-24T12:12:58.537+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(316.8, 85%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENW%3C/text%3E%3C/svg%3E)
Niesl, Wendelin
1
Reputation point
answered 2020-06-27T22:13:27.177+00:00
olufemia-MSFT
2,861
Reputation points
0 answers
Azure Policy to handle (or scope) Hidden Resources
Hello, I'm developing the policy to deploy diagnostic settings into database/master. However, as it (dbmaster) is the 'hidden resources', the policy somehow can not detect these hidden resources in its scope. Is there a possible way for policy mechanism…
asked 2020-06-04T03:02:37.893+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(16, 59%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKC%3C/text%3E%3C/svg%3E)
Krai Chamnivikaipong
6
Reputation points
commented 2020-06-17T18:24:49.13+00:00
bharathn-msft
5,086
Reputation points Microsoft Employee
1 answer
Azure Custom Policy - Programmatic Deployment Help / Problem
Hi, I am looking for some assistance with deploying a custom Azure Policy. I have authored a policy and am able to deploy via the portal, but when I attempt to deploy via CLI I am getting the following error: Failed to parse policy rule:…
asked 2020-06-03T09:47:44.66+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(60.8, 62%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EH%3C/text%3E%3C/svg%3E)
Hamid
1
Reputation point
answered 2020-06-04T22:41:14.557+00:00
Kenieva-MSFT
161
Reputation points Microsoft Employee
1 answer
Azure policy to validate mandatory NSG rules during deployment not working as expected
I have the following requirement: Users should not deploy NSG without the mandatory security rules. if the mandatory rule is not present or if the properties for the security rule are different than expected then the deployment should fail. Below is the…
asked 2020-05-19T17:24:30.833+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(124.80000000000001, 47%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERK%3C/text%3E%3C/svg%3E)
Ratish Kumar
71
Reputation points
commented 2020-05-21T16:05:40.523+00:00
Ratish Kumar
71
Reputation points
2 answers
One of the answers was accepted by the question author.
How do you debug Azure policies?
Say I have policy below. How do I exactly know why specific resources was compliant/non-compliant? Where do I actually see all the properties for resource which is used for evaluation for compliancy? Custom roles do not show up in Resources blade in…
asked 2020-05-19T17:05:57.763+00:00
Gregory Suvalian
186
Reputation points
accepted 2020-05-19T21:36:29.553+00:00
Gregory Suvalian
186
Reputation points
1 answer
One of the answers was accepted by the question author.
What is the point of having double negatives in Azure policy?
I'm trying to make sense of Microsoft built-in policy for security center which verifies custom subscription owner role and it has following as part of condition. What is the point of having code below? Why not just use single In condition instead of…
asked 2020-05-19T16:52:08.54+00:00
Gregory Suvalian
186
Reputation points
accepted 2020-05-19T19:07:53.583+00:00
Gregory Suvalian
186
Reputation points
1 answer
One of the answers was accepted by the question author.
How do I govern subresources in ResourceProviders?
There is AuditIfNotExists policy like below "policyRule": { "if": { "field": "type", "equals": "Microsoft.DBforPostgreSQL/servers" }, "then": { …
asked 2020-05-18T13:55:21.097+00:00
Gregory Suvalian
186
Reputation points
accepted 2020-05-19T12:29:52.28+00:00
Gregory Suvalian
186
Reputation points
1 answer
One of the answers was accepted by the question author.
Automation approach for policy management
What is the automation approach to manage each policy definition instead from Azure portal or through various SDKs so that it's more easily manageable and repeatable at enterprise scale? [Note: As we migrate from MSDN, this question has been posted…
asked 2020-05-15T07:00:32.757+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(249.60000000000002, 39%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
SwathiDhanwada-MSFT
17,556
Reputation points
accepted 2020-05-15T07:08:51.31+00:00
SwathiDhanwada-MSFT
17,556
Reputation points
1 answer
One of the answers was accepted by the question author.
Azure Monitor for VMs using Policy
How to enable Azure Monitor for VMs for Azure virtual machines or virtual machine scale sets by using Azure Policy? [Note: As we migrate from MSDN, this answer has been posted by an Azure Cloud Engineer as a frequently asked question] Source: Azure…
asked 2020-05-15T07:02:28.37+00:00
tbgangav-MSFT
10,381
Reputation points
accepted 2020-05-15T07:08:50.28+00:00
tbgangav-MSFT
10,381
Reputation points
1 answer
What is the min IAM role required to create Azure Policy and Blueprint
I have contributor access to a subscription. But i am not able to create Azure Policy and assign it to a particular resource group under the subscription. What is the role i needed to be assigned to if i need to create an Azure Policy and apply it to a…
asked 2020-02-11T22:52:56.39+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(150.4, 77%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPC%3C/text%3E%3C/svg%3E)
Pallab Chakraborty
401
Reputation points
answered 2020-02-12T05:56:22.457+00:00
AmanpreetSingh-MSFT
56,306
Reputation points