Policy Initiative Bicep Builder

Accessible at https://policyinitiativebuilder.yellowbay-9c92f1d3.westeurope.azurecontainerapps.io/

Tools & Resources

• Radzen Blazor Components
• Azure Policy Visual Studio Code Extension

Resource Graph Explorer Queries

Get a list of all exemptions

policyresources
| where type == "microsoft.authorization/policyexemptions"
| project
  id,
  name,
  tenantId,
  resourceGroup,
  subscriptionId,
  policyAssignmentId = properties.policyAssignmentId,
  displayName = properties.displayName,
  description = properties.description,
  category = properties.exemptionCategory,
  properties

Get a list of all policies

PolicyResources
| extend subscriptionId = tostring(properties.subscriptionId)
| join kind=leftouter (
    ResourceContainers 
    | where type=='microsoft.resources/subscriptions'
    | project subscriptionName=name, subscriptionId) on subscriptionId
| where type =~ 'Microsoft.PolicyInsights/PolicyStates'
| project 
    policyAssignmentName = properties.policyAssignmentName,
    policy = properties.policyDefinitionReferenceId, 
    state = properties.complianceState, 
    effect = properties.policyDefinitionAction,
    subscriptionId,
    subscriptionName,
    resourceGroup = properties.resourceGroup, 
    resourceType = properties.resourceType,
    resourceId = properties.resourceId,
    properties
| order by tostring(policyAssignmentName) desc, tostring(['state']) asc