CODEWITHSUNDEEP
azureazure-policy
prabhu
prabhu

Reputation: 3

Policy to audit resource group that contains resources

I am looking to configure policy to audit resource groups that contains resources, whether have the particular tag name or not. Policy should not audit the empty resource groups. My requirement is only to perform audit for tags, if the resource group contains resources. Is it a possible scenario for creating policy?

Upvotes: 0

Views: 232

Answers (1)

Bhargavi Annadevara
Bhargavi Annadevara

Reputation: 5512

Indeed, Azure Policy makes it possible to audit, and even enforce tagging rules and conventions on your resources.

The Audit effect can be used in your policy to create a warning event in the activity log when evaluating a non-compliant resource, but it doesn't stop the request.

Such a policy rule can look similar to the following:

"policyRule": {
  "if": {
    "field": "[concat('tags[', parameters('tagName'), ']')]",
    "exists": "false"
  },
  "then": {
    "effect": "audit"
  }
}

Here are some more examples that demonstrate assigning policies for tag compliance.

Note: To see if your Azure resource supports tagging, see Tag support.

Upvotes: 0

Related Questions