AzurePolicy-VNETMaxAddressSpaces/VNETMaxAddressSpaces-MgmtGrp.json at main · PieterbasNagengast/AzurePolicy-VNETMaxAddressSpaces · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
{
  "$schema": "https://schema.management.azure.com/schemas/2019-08-01/managementGroupDeploymentTemplate.json#",
  "contentVersion": "1.0.0.0",
  "metadata": {
    "_generator": {
      "name": "bicep",
      "version": "0.4.613.9944",
      "templateHash": "13181696630304882308"
    }
  },
  "functions": [],
  "resources": [
    {
      "type": "Microsoft.Authorization/policyDefinitions",
      "apiVersion": "2021-06-01",
      "name": "Max VNET address spaces allowed",
      "properties": {
        "policyType": "Custom",
        "description": "Maximum amount of Address Spaces allowed per VNET",
        "displayName": "Max VNET Address Spaces allowed",
        "mode": "All",
        "metadata": {
          "category": "Network"
        },
        "parameters": {
          "MaxAddressSpaces": {
            "type": "Integer",
            "defaultValue": 1,
            "metadata": {
              "description": "Maximum amount of Address Spaces allowed on VNETs",
              "displayName": "Max. VNET Address Spaces"
            }
          },
          "effect": {
            "type": "String",
            "metadata": {
              "displayName": "Effect",
              "description": "Enable or disable the execution of the policy."
            },
            "allowedValues": [
              "audit",
              "deny",
              "disabled"
            ],
            "defaultValue": "deny"
          }
        },
        "policyRule": {
          "if": {
            "allOf": [
              {
                "field": "type",
                "equals": "Microsoft.Network/virtualNetworks"
              },
              {
                "count": {
                  "field": "Microsoft.Network/virtualNetworks/addressSpace.addressPrefixes[*]"
                },
                "greater": "[[parameters('MaxAddressSpaces')]"
              }
            ]
          },
          "then": {
            "effect": "[[parameters('effect')]"
          }
        }
      }
    }
  ],
  "outputs": {
    "policyID": {
      "type": "string",
      "value": "[format('Microsoft.Authorization/policyDefinitions/{0}', 'Max VNET address spaces allowed')]"
    }
  }
}