armpolicy1.json

{
	 "if": {
	    "anyOf": [
		 {
			"not": {
			  "anyOf": [
                    {
				    "field": "type",
				    "like": "microsoft.alertsmanagement/smartDetectorAlertRules/*"
				    },
                    {
				    "field": "type",
				    "like": "Microsoft.Compute/disks/*"
				    },
                    {
				    "field": "type",
				    "like": "Microsoft.Compute/virtualMachines/*"
				    },
                    {
				    "field": "type",
				    "like": "Microsoft.Compute/virtualMachines/extensions/*"
				    },
                    {
				    "field": "type",
				    "like": "microsoft.insights/actiongroups/*"
				    },
                    {
				    "field": "type",
				    "like": "Microsoft.Insights/components/*"
				    },
                    {
				    "field": "type",
				    "like": "Microsoft.KeyVault/vaults/*"
				    },
                    {
				    "field": "type",
				    "like": "Microsoft.MachineLearningServices/workspaces/*"
				    },
                    {
				    "field": "type",
				    "like": "Microsoft.Network/networkSecurityGroups/*"
				    },
                    {
				    "field": "type",
				    "like": "Microsoft.Network/publicIPAddresses/*"
				    },
                    {
				    "field": "type",
				    "like": "Microsoft.Network/virtualNetworks/*"
				    },
                    {
				    "field": "type",
				    "like": "Microsoft.Storage/storageAccounts/*"
				    },
                    {
				    "field": "type",
				    "in": ["microsoft.alertsmanagement/smartDetectorAlertRules", "Microsoft.Compute/disks", "Microsoft.Compute/virtualMachines", "Microsoft.Compute/virtualMachines/extensions", "microsoft.insights/actiongroups", "Microsoft.Insights/components", "Microsoft.KeyVault/vaults", "Microsoft.MachineLearningServices/workspaces", "Microsoft.Network/networkSecurityGroups", "Microsoft.Network/publicIPAddresses", "Microsoft.Network/virtualNetworks", "Microsoft.Storage/storageAccounts"]
				    }
                ]
			}
		 },
          {
		  "allof": [
			{
			  "field": "type",
			  "equals": "Microsoft.Compute/disks"
			},
			{
			  "not": {
				"field": "Microsoft.Compute/disks/Sku.Tier",
				"in": ["Standard"]
				}
			  }
			]
		  },
          {
		  "allOf": [
			{
			  "field": "type",
			  "equals": "Microsoft.Compute/virtualMachines"
			},
			{
			  "not": {
				"allOf": [
				  {
                    "field": "Microsoft.Compute/virtualMachines/imageOffer",
					"in": [""]
				  },
				  {
					"field": "Microsoft.Compute/virtualMachines/imagePublisher",
					"in": [""]
				  },
				  {
					"field": "Microsoft.Compute/virtualMachines/imageSku",
					 "in": [""]
				  },
				  {
					"field": "Microsoft.Compute/virtualMachines/sku.name",
					"in": ["Standard_DS2_v2"]
				  }
				]
			  }
			}
		   ]
		},
          {
		  "allof": [
			{
			  "field": "type",
			  "equals": "Microsoft.KeyVault/vaults"
			},
			{
            "field": "Microsoft.KeyVault/vaults/sku.name",
            "notIn": ["Standard"]
            }
			]
		  },
            {
			"allOf": [
			  {
				"source": "action",
				"equals": "Microsoft.Storage/storageAccounts/write"
			  },
			  {
				"field": "type",
				"equals": "Microsoft.Storage/storageAccounts"
			  },
			  {
				"not": 
				  {
					"field": "Microsoft.Storage/storageAccounts/sku.name",
					"in": ["StandardLRS"]
				  }
			   }
			]
		  },

	  ]
	},
	"then": {
	  "effect": "deny"
	}
}