last sync: 2025-Jun-18 17:23:32 UTC

Deploy Resource Lock on RGs - tag exclusion

Community Policy definition

Source Repository Community-Policy GitHub
JSON Community-Policy GitHub
Deploy policy 466ba28e-87e0-4202-906b-d4b399d11591 (1.0.1) to Azure
Display name Deploy Resource Lock on RGs - tag exclusion
Id 466ba28e-87e0-4202-906b-d4b399d11591
Version 1.0.1
Details on versioning
Category General
Microsoft Learn
Description Automatically deploys a resource lock to resources that are not in the dev environment to prevent accidental deletion.
Mode All
Type Custom Community
Effect Default
DeployIfNotExists
Allowed
DeployIfNotExists, AuditIfNotExists, Disabled
RBAC role(s)
Role Name Role Id
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635
Rule aliases THEN-ExistenceCondition (1)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Authorization/locks/level Microsoft.Authorization locks properties.level True False
Rule resource types IF (1)
Microsoft.Resources/subscriptions/resourceGroups
THEN-Deployment (1)
Microsoft.Authorization/locks
JSON
EPAC
Deploy policy 466ba28e-87e0-4202-906b-d4b399d11591 (1.0.1) to Azure