如果未启用虚拟机备份，Azure 拒绝自定义策略

Question

我正在尝试创建自定义 azure 策略，如果有人创建虚拟机并且未启用备份，则部署应该失败。我已经尝试过以下代码，但不起作用。

{
    "type": "Microsoft.Authorization/policyDefinitions",
    "name": "enable backuo for-windows-vm",
    "properties": {
        "displayName": "enable backup for-windows-vm",
        "description": "enable backup for-windows-vm",
        "parameters": {},
        "policyRule": {
            "if": {
                "allOf": [
                    {
                        "field": "type",
                        "equals": "Microsoft.RecoveryServices/vaults/backupFabrics/backupProtectionIntent"
                    },
                    {
                        "field": "type",
                        "equals": "Microsoft.Compute"
                    },
                    {
                        "field": "Microsoft.RecoveryServices/Vaults",
                        "Notequals": "True"
                    }
                ]
            },
            "then": {
                "effect": "deny"
            }
        }
    }
}

Answer 1

This/this内置策略有助于实现您的要求。