policy.json

{
	"if": {
	   "anyOf": [
		{
		   "not": {
			 "anyOf": [
				   {
				   "field": "type",
				   "like": "Microsoft.Compute/*"
				   },
				   {
				   "field": "type",
				   "like": "Microsoft.Compute/virtualMachines/*"
				   },
				   {
				   "field": "type",
				   "like": "Microsoft.Network/networkInterfaces/*"
				   },
				   {
				   "field": "type",
				   "like": "Microsoft.Network/networkSecurityGroups/*"
				   },
				   {
				   "field": "type",
				   "like": "Microsoft.Network/publicIPAddresses/*"
				   },
				   {
				   "field": "type",
				   "like": "Microsoft.Network/virtualNetworks/*"
				   },
				   {
				   "field": "type",
				   "like": "Microsoft.OperationalInsights/workspaces/*"
				   },
				   {
				   "field": "type",
				   "like": "Microsoft.Storage/storageAccounts/*"
				   },
						{
				   "field": "type",
				   "like": "Microsoft.Authorization/policyDefinitions/*"
				   },
					 {
				   "field": "type",
				   "like": "Microsoft.Authorization/policyAssignments/*"
				   },
				   {
				   "field": "type",
				   "in": ["Microsoft.Authorization/policyAssignments","Microsoft.Authorization/policyDefinitions", "Microsoft.Compute", "Microsoft.Compute/virtualMachines", "Microsoft.Network/networkInterfaces", "Microsoft.Network/networkSecurityGroups", "Microsoft.Network/publicIPAddresses", "Microsoft.Network/virtualNetworks", "Microsoft.OperationalInsights/workspaces", "Microsoft.Storage/storageAccounts"]
				   }
			   ]
		   }
		},

		 {
		 "allOf": [
		   {
			 "field": "type",
			 "equals": "Microsoft.Compute/virtualMachines"
		   },
		   {
			 "not": {
			   "allOf": [
				 {
				   "field": "Microsoft.Compute/virtualMachines/imageOffer",
				   "in": ["UbuntuServer"]
				 },
				 {
				   "field": "Microsoft.Compute/virtualMachines/imagePublisher",
				   "in": ["Canonical"]
				 },
				 {
				   "field": "Microsoft.Compute/virtualMachines/imageSku",
					"in": ["18.04-LTS","18_04-lts-gen2","18_04-lts-gen1"]
				 },
				 {
				   "field": "Microsoft.Compute/virtualMachines/sku.name",
				   "in": ["Standard_B1s"]
				 }
			   ]
			 }
		   }
			 
		  ]
	   },
		    
	   {  
		"allof":[  
		   {  
			  "field":"type",
			  "equals":"Microsoft.Compute/disks"
		   },
		   {  
			  "not":{  
				 "field":"Microsoft.Compute/disks/Sku.Tier",
				 "in":[  
					"Premium", "Premium_LRS", "Standard_LRS", "Standard"
				 ]
			  }
		   }
		]
	 }

	 ]
   },
   "then": {
	 "effect": "deny"
   }
}