我可以通过Azure策略添加多个语句或多个效果吗？

Question

我需要创建一个Azure策略，以在没有标签的情况下创建的资源添加标签（例如名称，支持，CostCenter），

问题是，如果例如我创建VM并添加了名称标签，但我忘记了支持和CostCenter I希望我的策略添加这两个并保留我的姓名价值标签。

我可以添加一些条件来修改效果吗？还是倍数，如果/然后在定义中对象？

谢谢，

Answer 1

我认为，如果/then 块可以根据Azure Policy模式[此处] [1]提供多个。另外，这是DOC页面演示[策略定义结构] [1]。

但是，就您而言，您不需要这个，您可能只需要[]操作中的额外操作。

"then": {
  "effect": "modify",
  "details": {
    "roleDefinitionIds": [
      "/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"
    ],
  "operations": [
    {
      "operation": "Add",
      "field": "tags['costcenter']",
      "value": "US123"
    },
    {
      "operation": "Add",
      "field": "tags['Support']",
      "value": "Operations"
    }
  ]
  }
}

Answer 2

是的，您可以添加倍数条件语句。

有关结合逻辑运算符

{
    "properties": {
        "displayName": "Audit Azure Spring Cloud instances where distributed tracing is not enabled",
        "description": "Distributed tracing tools in Azure Spring Cloud allow debugging and monitoring the complex interconnections between microservices in an application. Distributed tracing tools should be enabled and in a healthy state.",
        "mode": "Indexed",
        "policyRule": {
            "if": {
                "allOf": [{
                        "field": "type",
                        "equals": "Microsoft.AppPlatform/Spring"
                    },
                    {
                        "anyOf": [{
                                "field": "Microsoft.AppPlatform/Spring/trace.enabled",
                                "notEquals": "true"
                            },
                            {
                                "field": "Microsoft.AppPlatform/Spring/trace.state",
                                "notEquals": "Succeeded"
                            }
                        ]
                    }
                ]
            },
            "then": {
                "effect": "audit"
            }
        }
    }
}