diff --git a/Definitions/policyAssignments/add-required-tag.jsonc b/Definitions/policyAssignments/add-required-tag.jsonc new file mode 100644 index 0000000..10501c5 --- /dev/null +++ b/Definitions/policyAssignments/add-required-tag.jsonc @@ -0,0 +1,25 @@ +{ + "$schema": "https://raw.githubusercontent.com/Azure/enterprise-azure-policy-as-code/main/Schemas/policy-assignment-schema.json", + "nodeName": "/Loc/", + "assignment": { + "name": "rg-add-required-tag", + "displayName": "Add Required Tag", + "description": "Ensures that a specified tag is added to all resource groups." + }, + "definitionEntry": { + "policyId": "7ce92201-8036-4d55-938e-0dce0a5bc475", + "displayName": "Require Tag on Resource Group with dynamic notScope" + }, + "parameters": { + "tagName" : "Owner", + "effect" : "Audit" + }, + "scope": { + "epac-dev": [ + "/providers/Microsoft.Management/managementGroups/EPAC-Fabrikam" + ], + "tenant": [ + "/providers/Microsoft.Management/managementGroups/Fabrikam" + ] + } +} \ No newline at end of file