Provide an "otherwise" effect
It would be useful to have an operator that provides the behavior:
If {conditionA} is True AND If {conditionB} is True
Then {effect}
Otherwise {no-effect}.
For example, the attached file demonstrates a possible policy definition that would restrict Public IP names to only those listed and ignore names of resources that are not Public IP addresses.
The apparent behavior of the allOf operator is to require all conditions to be applied to all resources which requires anticipatory knowledge of resources currently generated by Marketplace templates. For example, the NIC is now generated automatically by the new VM wizard and the name is randomly generated which can no longer be limited by policy.
Erika Altman
shared this idea
1 comment
-
Jeff Pope
commented
Agree, If, then, else would help and reduce the number of Polices people who have to create. I need , to apply a Policy that based on format of RG name it needs to apply one of two Policies but when I apply both Policies to same MG it does not work because it conflicts trying to use same tag name.