如何在Azure策略定义中获取资源的resourceGroupName?

要获取策略规则中的resourceGroupName,可以使用resourceGroup()函数。

以下是一个检查给定Microsoft.Network/bastionHosts资源是否部署在名称包含“核心服务”的资源组中的示例:

{
    "if": {
        "allOf": [{
                "value": "[resourceGroup().name]",
                "like": "*core-services*"
            },
            {
                "field": "type",
                "equals": "Microsoft.Network/bastionHosts"
            }
        ]
    },
    "then": {
        "effect": "deny"
    }
}

更多信息: https://learn.microsoft.com/en-us/azure/governance/policy/concepts/definition-structure#value-examples