Forum Discussion
Lagrahammicrosftcom
Microsoft
MicrosoftAzure Policy (tags)
Hello, I am working on a policy that restricts tags to predefined values. As of now, i have that functionality but i also want to restrict the creation of adding new tags as well. I want the user to ...
dsv591Microsoft
MicrosoftLagrahammicrosftcom Azure Policy can't do that right now, anyhow, even if you could, that wouldn't be recommended.
There are several resources in Azure that use hidden tags to function properly. Blocking tags outside of the ones predefined by Policy would mean those resources will fail to be created, even if all the required tags entered by user are present.
Would also advise to be very careful using the Deny effect for tag governance and instead recommend using Modify effect..
You can find some examples of tag governance with Modify effect here:
https://github.com/globalbao/terraform-azurerm-policy/blob/master/modules/policy-definitions/main.tf
You can find some examples of tag governance with Modify effect here:
https://github.com/globalbao/terraform-azurerm-policy/blob/master/modules/policy-definitions/main.tf
