last sync: 2023-Jun-19 17:45:01 UTC

Community Policy definition

Deploy Resource Lock on RGs - tag exclusion

Name Deploy Resource Lock on RGs - tag exclusion
Community-Policy GitHub
Id 08cb998d-6994-45b2-95a3-fef878582bb3
Version 1.0.0
details on versioning
Category Locks
Microsoft docs
Description Automatically deploys a resource lock to resources that are not in the dv environment to prevent accidental deletion.
Mode All
Type Custom Community
Effect Default
AuditIfNotExists
Allowed
AuditIfNotExists, DeployIfNotExists, Disabled
Used RBAC Role
Role Name Role Id
Rule Aliases THEN-ExistenceCondition (1)
Alias Namespace ResourceType DefaultPath Modifiable
Microsoft.Authorization/locks/level Microsoft.Authorization locks properties.level false
Rule ResourceTypes IF (1)
Microsoft.Resources/subscriptions/resourceGroups
THEN-Deployment (1)
Microsoft.Authorization/locks
JSON