1
1
---
2
2
title : " Quickstart: New policy assignment with templates"
3
3
description : In this quickstart, you use a Resource Manager template to create a policy assignment to identify non-compliant resources.
4
- ms.date : 11/25/2019
4
+ ms.date : 03/16/2020
5
5
ms.topic : quickstart
6
+ ms.custom : subject-armqs
6
7
---
7
8
# Quickstart: Create a policy assignment to identify non-compliant resources by using a Resource Manager template
8
9
9
10
The first step in understanding compliance in Azure is to identify the status of your resources.
10
11
This quickstart steps you through the process of creating a policy assignment to identify virtual
11
- machines that aren't using managed disks.
12
-
13
- At the end of this process, you'll successfully identify virtual machines that aren't using managed
12
+ machines that aren't using managed disks. At the end of this process, you'll successfully identify virtual machines that aren't using managed
14
13
disks. They're _ non-compliant_ with the policy assignment.
15
14
15
+ [ !INCLUDE [ About Azure Resource Manager] ( ../../../includes/resource-manager-quickstart-introduction.md )]
16
+
16
17
## Prerequisites
17
18
18
19
If you don't have an Azure subscription, create a [ free] ( https://azure.microsoft.com/free/ ) account
@@ -24,11 +25,17 @@ In this quickstart, you create a policy assignment and assign a built-in policy
24
25
_ Audit VMs that do not use managed disks_ . For a partial list of available built-in policies, see
25
26
[ Azure Policy samples] ( ./samples/index.md ) .
26
27
27
- There are several methods for creating policy assignments. In this quickstart, you use a
28
- [ quickstart template] ( https://azure.microsoft.com/resources/templates/101-azurepolicy-assign-builtinpolicy-resourcegroup/ ) .
29
- Here is a copy of the template:
28
+ ### Review the template
29
+
30
+ The template used in this quickstart is from [ Azure Quickstart templates] ( https://azure.microsoft.com/resources/templates/101-azurepolicy-assign-builtinpolicy-resourcegroup/ ) .
31
+
32
+ :::code language="json" source="~ /quickstart-templates/101-azurepolicy-assign-builtinpolicy-resourcegroup/azuredeploy.json" range="1-36" highlight="26-34":::
33
+
34
+ The resource defined in the template is:
35
+
36
+ - [ Microsoft.Authorization/policyAssignments] ( /azure/templates/microsoft.authorization/policyassignments )
30
37
31
- [ !code-json [ policy-assignment ] ( ~/quickstart-templates/101-azurepolicy-assign-builtinpolicy-resourcegroup/azuredeploy.json )]
38
+ ### Deploy the template
32
39
33
40
> [ !NOTE]
34
41
> Azure Policy service is free. For more information, see
@@ -63,7 +70,7 @@ Some additional resources:
63
70
- To learn subscription-level deployment, see
64
71
[ Create resource groups and resources at the subscription level] ( ../../azure-resource-manager/templates/deploy-to-subscription.md ) .
65
72
66
- ## Identify non-compliant resources
73
+ ## Validate the deployment
67
74
68
75
Select ** Compliance** in the left side of the page. Then locate the ** Audit VMs that do not use
69
76
managed disks** policy assignment you created.
0 commit comments