Azure Policy require multiple tags with values

Question

I have a policy that requires specific tag with specific values (json below), but I want to require more tags within the same policy also with specific value and not sure how to do it...&nbsp;Is there a way to add more tags with specific values to the same policy?For example, I want to require two tags:environment with prod/non-prod and department with Infra/Finance&nbsp;Is it possible?Thank you!&nbsp;{&nbsp; "properties": {&nbsp; &nbsp; "displayName": "Require tag environment and its values on resources ",&nbsp; &nbsp; "policyType": "Custom",&nbsp; &nbsp; "mode": "Indexed",&nbsp; &nbsp; "description": "Enforces a required tag environment and its value. Does not apply to resource groups.",&nbsp; &nbsp; "metadata": {&nbsp; &nbsp; &nbsp; "category": "Tags",&nbsp; &nbsp; &nbsp; "createdBy": ""&nbsp; &nbsp; &nbsp; "createdOn": ""&nbsp; &nbsp; &nbsp; "updatedBy": ""&nbsp; &nbsp; &nbsp; "updatedOn": ""&nbsp; &nbsp; },&nbsp; &nbsp; "version": "1.0.0",&nbsp; &nbsp; "parameters": {&nbsp; &nbsp; &nbsp; "tagName": {&nbsp; &nbsp; &nbsp; &nbsp; "type": "String",&nbsp; &nbsp; &nbsp; &nbsp; "metadata": {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "displayName": "Tag Name1",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "description": "Name of the tag, such as 'environment'"&nbsp; &nbsp; &nbsp; &nbsp; },&nbsp; &nbsp; &nbsp; &nbsp; "allowedValues": [&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "environment"&nbsp; &nbsp; &nbsp; &nbsp; ]&nbsp; &nbsp; &nbsp; },&nbsp; &nbsp; &nbsp; "tagValue": {&nbsp; &nbsp; &nbsp; &nbsp; "type": "Array",&nbsp; &nbsp; &nbsp; &nbsp; "metadata": {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "displayName": "Tag Value1",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "description": "Value of the tag, such as 'production'"&nbsp; &nbsp; &nbsp; &nbsp; },&nbsp; &nbsp; &nbsp; &nbsp; "allowedValues": [&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "prod",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "non-prod"&nbsp; &nbsp; &nbsp; &nbsp; ]&nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; },&nbsp; &nbsp; "policyRule": {&nbsp; &nbsp; &nbsp; "if": {&nbsp; &nbsp; &nbsp; &nbsp; "not": {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "field": "[concat('tags[', parameters('tagName'), ']')]",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "in": "[parameters('tagValue')]"&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; },&nbsp; &nbsp; &nbsp; "then": {&nbsp; &nbsp; &nbsp; &nbsp; "effect": "deny"&nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; },&nbsp; &nbsp; "versions": [&nbsp; &nbsp; &nbsp; "1.0.0"&nbsp; &nbsp; ]&nbsp; },&nbsp; }}

kidd_ip · Answer

Try this:
&nbsp;
{
  "properties": {
    "displayName": "Require tags environment and department with specific values on resources",
    "policyType": "Custom",
    "mode": "Indexed",
    "description": "Enforces required tags environment and department with their values. Does not apply to resource groups.",
    "metadata": {
      "category": "Tags",
      "createdBy": "",
      "createdOn": "",
      "updatedBy": "",
      "updatedOn": ""
    },
    "version": "1.0.0",
    "parameters": {
      "tagName1": {
        "type": "String",
        "metadata": {
          "displayName": "Tag Name1",
          "description": "Name of the tag, such as 'environment'"
        },
        "allowedValues": [
          "environment"
        ]
      },
      "tagValue1": {
        "type": "Array",
        "metadata": {
          "displayName": "Tag Value1",
          "description": "Value of the tag, such as 'prod' or 'non-prod'"
        },
        "allowedValues": [
          "prod",
          "non-prod"
        ]
      },
      "tagName2": {
        "type": "String",
        "metadata": {
          "displayName": "Tag Name2",
          "description": "Name of the tag, such as 'department'"
        },
        "allowedValues": [
          "department"
        ]
      },
      "tagValue2": {
        "type": "Array",
        "metadata": {
          "displayName": "Tag Value2",
          "description": "Value of the tag, such as 'Infra' or 'Finance'"
        },
        "allowedValues": [
          "Infra",
          "Finance"
        ]
      }
    },
    "policyRule": {
      "if": {
        "anyOf": [
          {
            "not": {
              "field": "[concat('tags[', parameters('tagName1'), ']')]",
              "in": "[parameters('tagValue1')]"
            }
          },
          {
            "not": {
              "field": "[concat('tags[', parameters('tagName2'), ']')]",
              "in": "[parameters('tagValue2')]"
            }
          }
        ]
      },
      "then": {
        "effect": "deny"
      }
    },
    "versions": [
      "1.0.0"
    ]
  }
}
&nbsp;

Forum Discussion

Azure Policy require multiple tags with values

Share

Resources