Export Azure Policy resources
This article provides information on how to export your existing Azure Policy resources. Exporting your resources is useful and recommended for backup, but is also an important step in your journey with Cloud Governance and treating your policy-as-code. Azure Policy resources can be exported through REST API, Azure CLI, and Azure PowerShell.
Note
The portal experience for exporting definitions to GitHub was deprecated in April 2023.
Export with Azure CLI
Azure Policy definitions, initiatives, and assignments can each be exported as JSON with Azure CLI. Each of these commands uses a name
parameter to specify which object to get the JSON for. The name
property is often a GUID and isn't the displayName
of the object.
The Azure CLI and Azure PowerShell example commands use a built-in Policy definition with the name
b2982f36-99f2-4db5-8eff-283140c09693
and the displayName
Storage accounts should disable public network access.
- Definition - az policy definition show.
- Initiative - az policy set-definition show.
- Assignment - az policy assignment show.
az policy definition show --name 'b2982f36-99f2-4db5-8eff-283140c09693'
Export with Azure PowerShell
Azure Policy definitions, initiatives, and assignments can each be exported as JSON with Azure PowerShell. Each of these cmdlets uses a Name
parameter to specify which object to get the JSON for. The Name
property is often a GUID (Globally Unique Identifier) and isn't the displayName
of the object.
- Definition - Get-AzPolicyDefinition.
- Initiative - Get-AzPolicySetDefinition.
- Assignment - Get-AzPolicyAssignment.
Get-AzPolicyDefinition -Name 'b2982f36-99f2-4db5-8eff-283140c09693' | Select-Object -Property * | ConvertTo-Json -Depth 10
Export to CSV with Resource Graph in Azure portal
Azure Resource Graph gives the ability to query at scale with complex filtering, grouping and sorting. Azure Resource Graph supports the policy resources table, which contains policy resources such as definitions, assignments and exemptions. Review our sample queries.. The Resource Graph explorer portal experience allows downloads of query results to CSV using the "Download to CSV" toolbar option.
Next steps
- Review examples at Azure Policy samples.
- Review the Azure Policy definition structure.
- Review Understanding policy effects.
- Understand how to programmatically create policies.
- Learn how to remediate noncompliant resources.
- Review what a management group is with Organize your resources with Azure management groups.