Blog Post

Core Infrastructure and Security Blog
7 MIN READ

Azure Policy Remediation with Deployment Scripts

AnthonyWatherston's avatar
AnthonyWatherston
Icon for Microsoft rankMicrosoft
Aug 21, 2020
How many times have you wanted to remediate a non-compliant object using Azure Policy but found you can’t because the policy language or type of object can’t be manipulated in that way. Or maybe you’...
Updated Aug 20, 2020
Version 1.0
AnthonyWatherston
AnthonyWatherston's avatar
AnthonyWatherston
Icon for Microsoft rankMicrosoft
May 18, 2021

Jack_Chen - no since the value I'm interested in confirm is the licence type: - 

{
    "field": "Microsoft.Compute/virtualMachines/licenseType",
    "exists": true
},
{
    "field": "Microsoft.Compute/virtualMachines/licenseType",
    "equals": "Windows_Server"
}

If this returns false then to deploy the deployment script object I must create a new "deployment" object which is a Microsoft.Resource/deployments type. The flow is a little bit confusing to follow 🙂