有关Azure策略豁免的查询

有关Azure策略豁免的查询,azure,azure-policy,Azure,Azure Policy,我想通过ARM模板为我已经到位的保单分配部署保单豁免。目标是免除特定资源组的订阅,因此属于该资源组的资源将免于遵守报告 我正在参考Microsoft Azure文档(在ARM JSON的链接和示例结构下方给出),以了解如何构造ARM模板,但我没有找到有关在何处定义豁免范围的信息 豁免的范围在其创建的范围中定义。因此,对于上述现有豁免的示例,豁免的范围是ExampleRG资源组 从文档中,Microsoft注意到: 策略豁免是作为资源层次结构上的子对象或授予豁免的单个资源创建的,因此目标不包括在

我想通过ARM模板为我已经到位的保单分配部署保单豁免。目标是免除特定资源组的订阅,因此属于该资源组的资源将免于遵守报告

我正在参考Microsoft Azure文档(在ARM JSON的链接和示例结构下方给出),以了解如何构造ARM模板,但我没有找到有关在何处定义豁免范围的信息


豁免的范围在其创建的范围中定义。因此,对于上述现有豁免的示例,豁免的范围是ExampleRG资源组

从文档中,Microsoft注意到: 策略豁免是作为资源层次结构上的子对象或授予豁免的单个资源创建的,因此目标不包括在豁免定义中

    "id": "/subscriptions/{subId}/resourceGroups/ExemptRG/providers/Microsoft.Authorization/policyExemptions/resourceIsNotApplicable",
    "name": "resourceIsNotApplicable",
    "type": "Microsoft.Authorization/policyExemptions",
    "properties": {
        "displayName": "This resource is scheduled for deletion",
        "description": "This resources is planned to be deleted by end of quarter and has been granted a waiver to the policy.",
        "metadata": {
            "requestedBy": "Storage team",
            "approvedBy": "IA",
            "approvedOn": "2020-07-26T08:02:32.0000000Z",
            "ticketRef": "4baf214c-8d54-4646-be3f-eb6ec7b9bc4f"
        },
        "policyAssignmentId": "/subscriptions/{mySubscriptionID}/providers/Microsoft.Authorization/policyAssignments/resourceShouldBeCompliantInit",
        "policyDefinitionReferenceIds": [
            "requiredTags",
            "allowedLocations"
        ],
        "exemptionCategory": "waiver",
        "expiresOn": "2020-12-31T23:59:00.0000000Z"
    }
}