Community Policy Repo

The purpose of this repo is for Azure Policy users and Microsoft internal teams to share and collaborate on custom policies. These policies are built either by customers or Microsoft Support engineers for customers. These are NOT Built-in policies hence are not check, tested or validated in any form by the Azure Policy Release Team. Please be wary of this and always TEST your policies before enforcing. Happy Coding!

For Built-in policies repo, please visit here: azure-policy

Contributing

This project welcomes contributions and suggestions. Most contributions require you to agree to a Contributor License Agreement (CLA) declaring that you have the right to, and actually do, grant us the rights to use your contribution. For details, visit https://cla.opensource.microsoft.com.

To get started contributing to the samples, please visit our contribution guide. We also have a PowerShell script that will validate your Policy against the contribution guide and fix problems for you. You can find it here.

When you submit a pull request, a CLA bot will automatically determine whether you need to provide a CLA and decorate the PR appropriately (e.g., status check, comment). Simply follow the instructions provided by the bot. You will only need to do this once across all repos using our CLA.

This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact opencode@microsoft.com with any additional questions or comments.

Getting Support

The general Azure Policy support role that this repository has is not supported by standard Azure support channels. See below for information about getting support help for Azure Policy.

General Questions

If you have questions you haven't been able to answer from the Azure Policy documentation, there are a few places that host discussions on Azure Policy:

• Microsoft Tech Community Azure Governance conversation space
• Join the Monthly Call on Azure Governance (register here)
• Search or add to Azure Policy discussions on StackOverflow

If your questions are more in-depth or involve information that is not public, open a new Azure Customer Support ticket.

Documentation Corrections

To report issues in the Azure Policy online documentation, look for a feedback area at the bottom of the page. If you don't see a place to enter feedback, you can also directly open a new issue at the Microsoft Docs GitHub.

New built-in Policy Proposals

If you have ideas for new built-in policies you want to suggest to Microsoft, you can submit them to Azure Governance Ideas. These suggestions are actively reviewed and prioritized for implementation.

Other Support for Azure Policy

If you are encountering livesite issues or difficulties in implementing new policies that may be due to problems in Azure Policy itself, open a support ticket at Azure Customer Support. If you want to submit an idea for consideration, add an idea or upvote an existing idea at Azure Governance User Voice.

Azure Policy Resources

Articles

• Azure Policy overview
• How to assign policies using the Azure portal
• How to assign policies using Azure PowerShell
• How to assign policies using Azure CLI
• Export and manage Azure policies as code with GitHub
• Definition structure
• Understand Policy effects
• Programmatically create policies
• Get compliance data
• Remediate non-compliant resources

References

• Azure CLI
• Azure PowerShell
  • Policy
• REST API
  • Events
  • States
  • Assignments
  • Policy Definitions
  • Policy Set Definitions
  • Policy Tracked Resources
  • Remediations