Azure 拒绝自定义策略，如果未启用 vm 备份

Question

我正在尝试创建一个自定义 azure 策略，这样如果有人创建 vm 并且未启用备份，那么部署应该会失败。我尝试了以下代码，但无法正常工作。

{
    "type": "Microsoft.Authorization/policyDefinitions",
    "name": "enable backuo for-windows-vm",
    "properties": {
        "displayName": "enable backup for-windows-vm",
        "description": "enable backup for-windows-vm",
        "parameters": {},
        "policyRule": {
            "if": {
                "allOf": [
                    {
                        "field": "type",
                        "equals": "Microsoft.RecoveryServices/vaults/backupFabrics/backupProtectionIntent"
                    },
                    {
                        "field": "type",
                        "equals": "Microsoft.Compute"
                    },
                    {
                        "field": "Microsoft.RecoveryServices/Vaults",
                        "Notequals": "True"
                    }
                ]
            },
            "then": {
                "effect": "deny"
            }
        }
    }
}

Answer 1

This / this 内置策略有助于实现您的要求。