{"id":1895,"date":"2018-12-07T19:59:52","date_gmt":"2018-12-07T18:59:52","guid":{"rendered":"https:\/\/whiteducksoftware.com\/?p=1895"},"modified":"2021-12-07T15:27:49","modified_gmt":"2021-12-07T14:27:49","slug":"cloudrichtlinien-mit-azure-policy","status":"publish","type":"post","link":"https:\/\/whiteduck.de\/en\/cloudrichtlinien-mit-azure-policy\/","title":{"rendered":"Cloudrichtlinien mit Azure Policy"},"content":{"rendered":"<h2>Cloudrichtlinien mit Azure Policy<\/h2>\n<p>Die\u00a0\u00dcbersicht \u00fcber Cloud Services und\u00a0Ressourcen\u00a0zu behalten\u00a0und diese zu\u00a0Verwalten,\u00a0kann schnell herausfordernd werden.\u00a0Vor allem, wenn sich\u00a0ein Projekt\u00a0\u00fcber mehrere Azure Subscriptions\u00a0wie Development, Test oder\u00a0Production\u00a0erstreckt und unterschiedliche\u00a0Teams\u00a0involviert sind, die miteinander an einer Cloud L\u00f6sung arbeiten.\u00a0<span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p>F\u00fcr solche F\u00e4lle kann es sinnig sein,\u00a0dass\u00a0beispielsweise\u00a0gewisse Richtlinien f\u00fcr die Erstellung von\u00a0Ressourcen\u00a0festgelegt werden.\u00a0Oder eine schnelle \u00dcbersicht \u00fcber den aktuellen Compliance Stand der Umgebungen gew\u00fcnscht ist, also gepr\u00fcft werden soll, ob die eingef\u00fchrten Regeln\u00a0auch eingehalten werden.\u00a0<span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p>Um diese\u00a0Problematiken zu\u00a0erleichtern\u00a0kann der\u00a0<b>Azure Policy\u00a0<\/b>Service\u00a0genutzt werden.\u00a0Um das umzusetzen muss einfach im Azure Portal unter <em>All Services<\/em> der Policy Service ausgew\u00e4hlt werden.\u00a0Azure Policy verursacht keine Kosten.<span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\"><br \/>\n<\/span><\/p>\n<p><img decoding=\"async\" class=\"lazyload alignnone size-full wp-image-2923\" src=\"https:\/\/whiteduck.de\/wp-content\/uploads\/CreatePolicyService.png\" data-orig-src=\"https:\/\/whiteduck.de\/wp-content\/uploads\/CreatePolicyService.png\" alt=\"\" width=\"780\" height=\"139\" srcset=\"data:image\/svg+xml,%3Csvg%20xmlns%3D%27http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%27%20width%3D%27780%27%20height%3D%27139%27%20viewBox%3D%270%200%20780%20139%27%3E%3Crect%20width%3D%27780%27%20height%3D%27139%27%20fill-opacity%3D%220%22%2F%3E%3C%2Fsvg%3E\" data-srcset=\"https:\/\/whiteduck.de\/wp-content\/uploads\/CreatePolicyService-200x36.png 200w, https:\/\/whiteduck.de\/wp-content\/uploads\/CreatePolicyService-300x53.png 300w, https:\/\/whiteduck.de\/wp-content\/uploads\/CreatePolicyService-400x71.png 400w, https:\/\/whiteduck.de\/wp-content\/uploads\/CreatePolicyService-600x107.png 600w, https:\/\/whiteduck.de\/wp-content\/uploads\/CreatePolicyService-768x137.png 768w, https:\/\/whiteduck.de\/wp-content\/uploads\/CreatePolicyService.png 780w\" data-sizes=\"auto\" data-orig-sizes=\"(max-width: 780px) 100vw, 780px\" \/><\/p>\n<p><span class=\"TextRun SCXW77551937\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW77551937\">Eine Policy ist eine Richtlinie, welche gewisse Vorgaben und Effekte festlegt und deren Einhaltung \u00fcberpr\u00fcft.<\/span><\/span><span class=\"TextRun SCXW77551937\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW77551937\">\u00a0<\/span><\/span><span class=\"TextRun SCXW77551937\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW77551937\">So k\u00f6nnen Standards leicht umgesetzt und kontrolliert werden. Eine Policy kann auf<\/span><\/span><span class=\"TextRun SCXW77551937\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW77551937\">\u00a0<\/span><span class=\"SpellingError SCXW77551937\">Subscription<\/span><span class=\"NormalTextRun SCXW77551937\">\u00a0oder\u00a0<\/span><span class=\"SpellingError SCXW77551937\">Resource<\/span><span class=\"NormalTextRun SCXW77551937\">\u00a0Group Ebene\u00a0<\/span><\/span><span class=\"TextRun SCXW77551937\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW77551937\">zugewiesen werden.<\/span><\/span><span class=\"EOP SCXW77551937\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><img decoding=\"async\" class=\"lazyload wp-image-2924 aligncenter\" src=\"https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicy2.png\" data-orig-src=\"https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicy2.png\" alt=\"\" width=\"371\" height=\"327\" srcset=\"data:image\/svg+xml,%3Csvg%20xmlns%3D%27http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%27%20width%3D%27371%27%20height%3D%27327%27%20viewBox%3D%270%200%20371%20327%27%3E%3Crect%20width%3D%27371%27%20height%3D%27327%27%20fill-opacity%3D%220%22%2F%3E%3C%2Fsvg%3E\" data-srcset=\"https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicy2-200x176.png 200w, https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicy2-300x264.png 300w, https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicy2-400x352.png 400w, https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicy2-600x528.png 600w, https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicy2-768x676.png 768w, https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicy2-800x704.png 800w, https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicy2-1024x902.png 1024w, https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicy2.png 1072w\" data-sizes=\"auto\" data-orig-sizes=\"(max-width: 371px) 100vw, 371px\" \/><\/p>\n<p><span class=\"TextRun SCXW51172287\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW51172287\">Die\u00a0<\/span><span class=\"SpellingError SCXW51172287\">Policies<\/span><span class=\"NormalTextRun SCXW51172287\">\u00a0k\u00f6nnen \u00fcber das Azure Portal, PowerShell und Azure CLI zugewiesen werden. Eine \u00dcbersicht \u00fcber die a<\/span><span class=\"ContextualSpellingAndGrammarError SCXW51172287\">ktuell<\/span><span class=\"NormalTextRun SCXW51172287\"> festgelegten Richtlinien ist im Portal zu sehen.\u00a0<\/span><\/span><span class=\"TextRun SCXW51172287\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW51172287\">Hier ist im Detail jeder Service aufgesc<\/span><\/span><span class=\"TextRun SCXW51172287\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW51172287\">h<\/span><\/span><span class=\"TextRun SCXW51172287\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW51172287\">l\u00fcsselt, der die gew\u00fcnschten Vorgaben nicht erf\u00fcllt.\u00a0<\/span><\/span><span class=\"EOP SCXW51172287\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><img decoding=\"async\" class=\"lazyload size-full wp-image-2925 aligncenter\" src=\"https:\/\/whiteduck.de\/wp-content\/uploads\/PolicyOverview.png\" data-orig-src=\"https:\/\/whiteduck.de\/wp-content\/uploads\/PolicyOverview.png\" alt=\"\" width=\"711\" height=\"112\" srcset=\"data:image\/svg+xml,%3Csvg%20xmlns%3D%27http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%27%20width%3D%27711%27%20height%3D%27112%27%20viewBox%3D%270%200%20711%20112%27%3E%3Crect%20width%3D%27711%27%20height%3D%27112%27%20fill-opacity%3D%220%22%2F%3E%3C%2Fsvg%3E\" data-srcset=\"https:\/\/whiteduck.de\/wp-content\/uploads\/PolicyOverview-200x32.png 200w, https:\/\/whiteduck.de\/wp-content\/uploads\/PolicyOverview-300x47.png 300w, https:\/\/whiteduck.de\/wp-content\/uploads\/PolicyOverview-400x63.png 400w, https:\/\/whiteduck.de\/wp-content\/uploads\/PolicyOverview-600x95.png 600w, https:\/\/whiteduck.de\/wp-content\/uploads\/PolicyOverview.png 711w\" data-sizes=\"auto\" data-orig-sizes=\"(max-width: 711px) 100vw, 711px\" \/><\/p>\n<p><span class=\"TextRun SCXW29820490\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW29820490\">Es ist m\u00f6glich bereits fertige &#8220;<\/span><\/span><span class=\"TextRun SCXW29820490\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"SpellingError SCXW29820490\">Built<\/span><\/span><span class=\"TextRun SCXW29820490\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW29820490\">-in&#8221; <\/span><\/span><span class=\"TextRun SCXW29820490\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"SpellingError SCXW29820490\">Policies<\/span><\/span><span class=\"TextRun SCXW29820490\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW29820490\">\u00a0zu nutzen oder eigene sog. &#8220;Custom\u00a0<\/span><\/span><span class=\"TextRun SCXW29820490\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"SpellingError SCXW29820490\">Policies&#8221;<\/span><\/span><span class=\"TextRun SCXW29820490\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW29820490\"> zu implementieren. Weiterhin k\u00f6nnen verschiedene\u00a0<\/span><\/span><span class=\"TextRun SCXW29820490\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"SpellingError SCXW29820490\">Policies<\/span><\/span><span class=\"TextRun SCXW29820490\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW29820490\">\u00a0zu sogenannten &#8220;Initiatives&#8221; zusammengefasst werden. Eine solche legt ein Ziel fest, welches durch die Einhaltung mehrere\u00a0<\/span><\/span><span class=\"TextRun SCXW29820490\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"SpellingError SCXW29820490\">Policies<\/span><\/span><span class=\"TextRun SCXW29820490\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW29820490\">\u00a0erreicht wird, die so\u00a0<\/span><\/span><span class=\"TextRun SCXW29820490\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW29820490\">g<\/span><\/span><span class=\"TextRun SCXW29820490\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW29820490\">ruppiert<\/span><\/span><span class=\"TextRun SCXW29820490\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW29820490\">\u00a0werden.\u00a0<\/span><\/span><\/p>\n<p><img decoding=\"async\" class=\"lazyload wp-image-2926 aligncenter\" src=\"https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicy.png\" data-orig-src=\"https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicy.png\" alt=\"\" width=\"382\" height=\"403\" srcset=\"data:image\/svg+xml,%3Csvg%20xmlns%3D%27http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%27%20width%3D%27382%27%20height%3D%27403%27%20viewBox%3D%270%200%20382%20403%27%3E%3Crect%20width%3D%27382%27%20height%3D%27403%27%20fill-opacity%3D%220%22%2F%3E%3C%2Fsvg%3E\" data-srcset=\"https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicy-200x211.png 200w, https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicy-284x300.png 284w, https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicy-400x422.png 400w, https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicy-600x633.png 600w, https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicy-768x810.png 768w, https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicy-800x844.png 800w, https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicy-971x1024.png 971w, https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicy-1200x1266.png 1200w, https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicy.png 1240w\" data-sizes=\"auto\" data-orig-sizes=\"(max-width: 382px) 100vw, 382px\" \/><\/p>\n<h3><strong>Funktionsweise<\/strong><\/h3>\n<p><span class=\"TextRun SCXW113376949\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW113376949\">Soll eine Ressource erstellt werden, so erfolgt dies normalerweise \u00fcber einen Request an den Azure\u00a0<\/span><span class=\"SpellingError SCXW113376949\">Resource<\/span><span class=\"NormalTextRun SCXW113376949\">\u00a0Manager. Es gibt auch \u00e4ltere Services, bei denen dies anders verl\u00e4uft aber darauf m\u00f6chte ich hier nicht weiter eingehen. Jedenfalls<\/span><span class=\"NormalTextRun SCXW113376949\">\u00a0werden die hinterlegten\u00a0<\/span><span class=\"SpellingError SCXW113376949\">Policies<\/span><span class=\"NormalTextRun SCXW113376949\">\u00a0gepr\u00fcft und nur wenn alle\u00a0<\/span><span class=\"SpellingError SCXW113376949\">Richtlinien<\/span><span class=\"NormalTextRun SCXW113376949\">\u00a0erf\u00fcllt sind erfolgt ein\u00a0<\/span><span class=\"SpellingError SCXW113376949\">Deployment<\/span><span class=\"NormalTextRun SCXW113376949\">\u00a0der Ressource. Ansonsten kommt es zu einer Fehlermeldung. Wird eine Policy\u00a0<\/span><\/span><span class=\"TextRun SCXW113376949\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW113376949\">eingef\u00fchrt werden alle\u00a0<\/span><span class=\"SpellingError SCXW113376949\">Ressourcen<\/span><span class=\"NormalTextRun SCXW113376949\">\u00a0in der Gruppe oder\u00a0<\/span><span class=\"SpellingError SCXW113376949\">Subscription<\/span><span class=\"NormalTextRun SCXW113376949\">\u00a0auf Compliance gepr\u00fcft. Diese \u00dcberpr\u00fcfung erfolgt periodisch und sobald eine neue Policy eingesetzt oder eine bestehende ver\u00e4ndert wurde.<\/span><\/span><\/p>\n<p><img decoding=\"async\" class=\"lazyload wp-image-2927 aligncenter\" src=\"https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicyHowItWorks-1.png\" data-orig-src=\"https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicyHowItWorks-1.png\" alt=\"\" width=\"597\" height=\"260\" srcset=\"data:image\/svg+xml,%3Csvg%20xmlns%3D%27http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%27%20width%3D%27597%27%20height%3D%27260%27%20viewBox%3D%270%200%20597%20260%27%3E%3Crect%20width%3D%27597%27%20height%3D%27260%27%20fill-opacity%3D%220%22%2F%3E%3C%2Fsvg%3E\" data-srcset=\"https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicyHowItWorks-1-200x87.png 200w, https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicyHowItWorks-1-300x131.png 300w, https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicyHowItWorks-1-400x174.png 400w, https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicyHowItWorks-1-600x261.png 600w, https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicyHowItWorks-1-768x334.png 768w, https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicyHowItWorks-1-800x348.png 800w, https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicyHowItWorks-1-1024x446.png 1024w, https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicyHowItWorks-1-1200x523.png 1200w, https:\/\/whiteduck.de\/wp-content\/uploads\/AzurePolicyHowItWorks-1.png 2560w\" data-sizes=\"auto\" data-orig-sizes=\"(max-width: 597px) 100vw, 597px\" \/><\/p>\n<h3>Bestandteile einer Policy<\/h3>\n<p>Wie bereits erw\u00e4hnt, besteht eine Policy aus einem &#8220;if..then&#8221; Statement. Weiterhin gibt es logische Operatoren wie\u00a0z.B &#8220;not&#8221;, Accessors und\u00a0Conditions\u00a0und nat\u00fcrlich die\u00a0Felder\u00a0die angesprochen werden k\u00f6nnen.<span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p>Im &#8220;then&#8221; Statement gibt es zudem verschiedene Aktionen wie\u00a0deny,\u00a0audit,\u00a0append, sowie &#8220;auditIfNotExists&#8221; und &#8220;deployIfNotExists&#8221;. Welche ausgef\u00fchrt werden, wenn der &#8220;if&#8221; Teil erf\u00fcllt ist. Die letzten beiden sind beispielsweise daf\u00fcr da, um unter gewissen Voraussetzungen zu pr\u00fcfen ob Bestandteile einer Architektur fehlen und diese ggf. automatisch\u00a0zu deployen. Also\u00a0etwa\u00a0wenn z. B. ein Virtuelles Netzwerk (VNET) erstellt wird, dann soll auch ein Network\u00a0Watcher\u00a0existieren.\u00a0Es ist zu empfehlen, vorab eine neue Policy auf &#8220;audit&#8221; zu setzten, da hierdurch erstmal evaluiert wird f\u00fcr welche Ressourcen sie g\u00fcltig ist und so keine Probleme mit einer laufenden Umgebung auftreten.<\/p>\n<p><img decoding=\"async\" class=\"lazyload alignnone size-full wp-image-2929\" src=\"https:\/\/whiteduck.de\/wp-content\/uploads\/Policy-Language.png\" data-orig-src=\"https:\/\/whiteduck.de\/wp-content\/uploads\/Policy-Language.png\" alt=\"\" width=\"757\" height=\"727\" srcset=\"data:image\/svg+xml,%3Csvg%20xmlns%3D%27http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%27%20width%3D%27757%27%20height%3D%27727%27%20viewBox%3D%270%200%20757%20727%27%3E%3Crect%20width%3D%27757%27%20height%3D%27727%27%20fill-opacity%3D%220%22%2F%3E%3C%2Fsvg%3E\" data-srcset=\"https:\/\/whiteduck.de\/wp-content\/uploads\/Policy-Language-200x192.png 200w, https:\/\/whiteduck.de\/wp-content\/uploads\/Policy-Language-300x288.png 300w, https:\/\/whiteduck.de\/wp-content\/uploads\/Policy-Language-400x384.png 400w, https:\/\/whiteduck.de\/wp-content\/uploads\/Policy-Language-600x576.png 600w, https:\/\/whiteduck.de\/wp-content\/uploads\/Policy-Language.png 757w\" data-sizes=\"auto\" data-orig-sizes=\"(max-width: 757px) 100vw, 757px\" \/><\/p>\n<p><span class=\"TextRun SCXW46845208\"><span class=\"NormalTextRun SCXW46845208\">Beispielweise kann durch eine Custom Policy auch die Einhaltung einer Namenskonvention erzwungen werden.<\/span><\/span><\/p>\n<p><img decoding=\"async\" class=\"lazyload alignnone size-full wp-image-2928\" src=\"https:\/\/whiteduck.de\/wp-content\/uploads\/example.png\" data-orig-src=\"https:\/\/whiteduck.de\/wp-content\/uploads\/example.png\" alt=\"\" width=\"424\" height=\"209\" srcset=\"data:image\/svg+xml,%3Csvg%20xmlns%3D%27http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%27%20width%3D%27424%27%20height%3D%27209%27%20viewBox%3D%270%200%20424%20209%27%3E%3Crect%20width%3D%27424%27%20height%3D%27209%27%20fill-opacity%3D%220%22%2F%3E%3C%2Fsvg%3E\" data-srcset=\"https:\/\/whiteduck.de\/wp-content\/uploads\/example-200x99.png 200w, https:\/\/whiteduck.de\/wp-content\/uploads\/example-300x148.png 300w, https:\/\/whiteduck.de\/wp-content\/uploads\/example-400x197.png 400w, https:\/\/whiteduck.de\/wp-content\/uploads\/example.png 424w\" data-sizes=\"auto\" data-orig-sizes=\"(max-width: 424px) 100vw, 424px\" \/><\/p>\n<h3>Built-in Policies<\/h3>\n<p><span class=\"TextRun SCXW160512646\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW160512646\">Oftmals gibt es<\/span><\/span><span class=\"TextRun SCXW160512646\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW160512646\">\u00a0den Fall, dass\u00a0<\/span><span class=\"SpellingError SCXW160512646\">dass<\/span><span class=\"NormalTextRun SCXW160512646\">\u00a0ein Team (A) die Azure Umgebung verwaltet. Ein weiteres Team (B) aber darauf arbeitet und Services nutzt<\/span><\/span><span class=\"TextRun SCXW160512646\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW160512646\">\u00a0und erstellt<\/span><\/span><span class=\"TextRun SCXW160512646\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW160512646\">. Das erste Team m\u00f6chte nun, dass\u00a0<\/span><\/span><span class=\"TextRun SCXW160512646\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW160512646\">gewisse<\/span><\/span><span class=\"TextRun SCXW160512646\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW160512646\">\u00a0Vorgaben eingehalten werden.<\/span><\/span><span class=\"TextRun SCXW160512646\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW160512646\">\u00a0So soll es\u00a0<\/span><\/span><span class=\"TextRun SCXW160512646\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW160512646\">etwa\u00a0<\/span><\/span><span class=\"TextRun SCXW160512646\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW160512646\">nur m\u00f6glich sein, Re<\/span><\/span><span class=\"TextRun SCXW160512646\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW160512646\">ssourcen in\u00a0<\/span><\/span><span class=\"TextRun SCXW160512646\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW160512646\">den Regionen\u00a0<\/span><\/span><span class=\"TextRun SCXW160512646\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW160512646\">Westeuropa\u00a0<\/span><\/span><span class=\"TextRun SCXW160512646\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW160512646\">und\u00a0<\/span><\/span><span class=\"TextRun SCXW160512646\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW160512646\">Nordeuropa<\/span><\/span><span class=\"TextRun SCXW160512646\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW160512646\">\u00a0<\/span><\/span><span class=\"TextRun SCXW160512646\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW160512646\">zu erstellen<\/span><\/span><span class=\"TextRun SCXW160512646\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW160512646\">.<\/span><\/span><span class=\"TextRun SCXW160512646\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW160512646\">\u00a0<\/span><\/span><span class=\"TextRun SCXW160512646\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW160512646\">Dies\u00a0<\/span><\/span><span class=\"TextRun SCXW160512646\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW160512646\">wird durch die Verwendung der<\/span><\/span> <span class=\"TextRun SCXW160512646\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW160512646\">&#8220;<\/span><span class=\"SpellingError SCXW160512646\">Built<\/span><span class=\"NormalTextRun SCXW160512646\">-in&#8221; Policy &#8220;<\/span><span class=\"SpellingError SCXW160512646\">Allowed<\/span><span class=\"NormalTextRun SCXW160512646\">\u00a0Locations&#8221; m\u00f6glich.<\/span><\/span><\/p>\n<p><img decoding=\"async\" class=\"lazyload alignnone size-full wp-image-2930\" src=\"https:\/\/whiteduck.de\/wp-content\/uploads\/allowedlocations.png\" data-orig-src=\"https:\/\/whiteduck.de\/wp-content\/uploads\/allowedlocations.png\" alt=\"\" width=\"690\" height=\"109\" srcset=\"data:image\/svg+xml,%3Csvg%20xmlns%3D%27http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%27%20width%3D%27690%27%20height%3D%27109%27%20viewBox%3D%270%200%20690%20109%27%3E%3Crect%20width%3D%27690%27%20height%3D%27109%27%20fill-opacity%3D%220%22%2F%3E%3C%2Fsvg%3E\" data-srcset=\"https:\/\/whiteduck.de\/wp-content\/uploads\/allowedlocations-200x32.png 200w, https:\/\/whiteduck.de\/wp-content\/uploads\/allowedlocations-300x47.png 300w, https:\/\/whiteduck.de\/wp-content\/uploads\/allowedlocations-400x63.png 400w, https:\/\/whiteduck.de\/wp-content\/uploads\/allowedlocations-600x95.png 600w, https:\/\/whiteduck.de\/wp-content\/uploads\/allowedlocations.png 690w\" data-sizes=\"auto\" data-orig-sizes=\"(max-width: 690px) 100vw, 690px\" \/><\/p>\n<p><span class=\"TextRun SCXW131053244\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW131053244\">Diese Policy kann \u00fcber das Azure Portal zugewiesen werden. Betrachtet man das zugeh\u00f6rige JSON so gibt es Einblick in den Aufbau. Jede Policy besteht aus einer &#8220;if..then&#8221; Struktur. Hier wird f\u00fcr alle Ressourcen das Feld &#8220;location&#8221; betrachtet. Passt nun eine Auswahl beim Erstellen eines Service nicht zu einem der Parameter in der vorgegebenen Liste, so tritt der Effekt &#8220;deny&#8221; in Kraft und die Erstellung wird verhindert. Die Auswahl der erlaubten Regionen wird beim aktivieren der Policy getroffen.<\/span><\/span><span class=\"EOP SCXW131053244\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><img decoding=\"async\" class=\"lazyload alignnone size-full wp-image-2931\" src=\"https:\/\/whiteduck.de\/wp-content\/uploads\/allowedlocationsJSON.png\" data-orig-src=\"https:\/\/whiteduck.de\/wp-content\/uploads\/allowedlocationsJSON.png\" alt=\"\" width=\"614\" height=\"388\" srcset=\"data:image\/svg+xml,%3Csvg%20xmlns%3D%27http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%27%20width%3D%27614%27%20height%3D%27388%27%20viewBox%3D%270%200%20614%20388%27%3E%3Crect%20width%3D%27614%27%20height%3D%27388%27%20fill-opacity%3D%220%22%2F%3E%3C%2Fsvg%3E\" data-srcset=\"https:\/\/whiteduck.de\/wp-content\/uploads\/allowedlocationsJSON-200x126.png 200w, https:\/\/whiteduck.de\/wp-content\/uploads\/allowedlocationsJSON-300x190.png 300w, https:\/\/whiteduck.de\/wp-content\/uploads\/allowedlocationsJSON-320x202.png 320w, https:\/\/whiteduck.de\/wp-content\/uploads\/allowedlocationsJSON-400x253.png 400w, https:\/\/whiteduck.de\/wp-content\/uploads\/allowedlocationsJSON-600x379.png 600w, https:\/\/whiteduck.de\/wp-content\/uploads\/allowedlocationsJSON.png 614w\" data-sizes=\"auto\" data-orig-sizes=\"(max-width: 614px) 100vw, 614px\" \/><\/p>\n<p><span class=\"TextRun SCXW242561886\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW242561886\">Azure Policy kann weiterhin auch daf\u00fcr genutzt werden, Audits durchzuf\u00fchren.\u00a0 S<\/span><\/span><span class=\"TextRun SCXW242561886\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW242561886\">o\u00a0<\/span><\/span><span class=\"TextRun SCXW242561886\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW242561886\">soll\u00a0<\/span><\/span><span class=\"TextRun SCXW242561886\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW242561886\">beispielsweise\u00a0<\/span><\/span><span class=\"TextRun SCXW242561886\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW242561886\">gepr\u00fcft werden, wie viele VM&#8217;s keine\u00a0<\/span><span class=\"SpellingError SCXW242561886\">Managed<\/span><span class=\"NormalTextRun SCXW242561886\">\u00a0Disks nutzen. Dies ist mit einer der &#8220;Audit&#8221; <\/span><span class=\"SpellingError SCXW242561886\">Policies<\/span><span class=\"NormalTextRun SCXW242561886\">\u00a0m\u00f6glich.<\/span><\/span><span class=\"EOP SCXW242561886\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><img decoding=\"async\" class=\"lazyload alignnone size-full wp-image-2932\" src=\"https:\/\/whiteduck.de\/wp-content\/uploads\/audit.png\" data-orig-src=\"https:\/\/whiteduck.de\/wp-content\/uploads\/audit.png\" alt=\"\" width=\"299\" height=\"73\" srcset=\"data:image\/svg+xml,%3Csvg%20xmlns%3D%27http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%27%20width%3D%27299%27%20height%3D%2773%27%20viewBox%3D%270%200%20299%2073%27%3E%3Crect%20width%3D%27299%27%20height%3D%2773%27%20fill-opacity%3D%220%22%2F%3E%3C%2Fsvg%3E\" data-srcset=\"https:\/\/whiteduck.de\/wp-content\/uploads\/audit-200x49.png 200w, https:\/\/whiteduck.de\/wp-content\/uploads\/audit.png 299w\" data-sizes=\"auto\" data-orig-sizes=\"(max-width: 299px) 100vw, 299px\" \/><\/p>\n<h3>Custom Policies<\/h3>\n<p><span class=\"TextRun SCXW196634506\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW196634506\">Wie bereits erw\u00e4hnt besteht eine weitreichende M\u00f6glichkeit, die\u00a0<\/span><span class=\"SpellingError SCXW196634506\">Policies<\/span><span class=\"NormalTextRun SCXW196634506\">\u00a0individuell anzupassen<\/span><\/span><span class=\"TextRun SCXW196634506\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW196634506\">\u00a0und\u00a0<\/span><\/span><span class=\"TextRun SCXW196634506\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW196634506\">zu erstellen.<\/span><\/span><span class=\"TextRun SCXW196634506\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW196634506\">\u00a0<\/span><\/span><span class=\"TextRun SCXW196634506\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW196634506\">Hierf\u00fcr werden JSON Dateien benutzt<\/span><\/span><span class=\"TextRun SCXW196634506\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW196634506\">.\u00a0<\/span><\/span><span class=\"TextRun SCXW196634506\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW196634506\">Ist hier, zur Veranschaulichung, die Erstellung der Policy \u00fcber das Portal aufgezeigt, so ist dies auch mittels PowerShell und Azure CLI m\u00f6glich.<\/span><\/span><span class=\"EOP SCXW196634506\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><img decoding=\"async\" class=\"lazyload alignnone size-full wp-image-2933\" src=\"https:\/\/whiteduck.de\/wp-content\/uploads\/policyDefinitions.png\" data-orig-src=\"https:\/\/whiteduck.de\/wp-content\/uploads\/policyDefinitions.png\" alt=\"\" width=\"877\" height=\"811\" srcset=\"data:image\/svg+xml,%3Csvg%20xmlns%3D%27http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%27%20width%3D%27877%27%20height%3D%27811%27%20viewBox%3D%270%200%20877%20811%27%3E%3Crect%20width%3D%27877%27%20height%3D%27811%27%20fill-opacity%3D%220%22%2F%3E%3C%2Fsvg%3E\" data-srcset=\"https:\/\/whiteduck.de\/wp-content\/uploads\/policyDefinitions-200x185.png 200w, https:\/\/whiteduck.de\/wp-content\/uploads\/policyDefinitions-300x277.png 300w, https:\/\/whiteduck.de\/wp-content\/uploads\/policyDefinitions-400x370.png 400w, https:\/\/whiteduck.de\/wp-content\/uploads\/policyDefinitions-600x555.png 600w, https:\/\/whiteduck.de\/wp-content\/uploads\/policyDefinitions-768x710.png 768w, https:\/\/whiteduck.de\/wp-content\/uploads\/policyDefinitions-800x740.png 800w, https:\/\/whiteduck.de\/wp-content\/uploads\/policyDefinitions.png 877w\" data-sizes=\"auto\" data-orig-sizes=\"(max-width: 877px) 100vw, 877px\" \/><\/p>\n<p><span class=\"TextRun SCXW186235767\" lang=\"DE-DE\" xml:lang=\"DE-DE\"><span class=\"NormalTextRun SCXW186235767\">Hier noch der Link zur passenden Azure Dokumentation: \u00a0<a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/governance\/policy\/\">Azure Policy Dokumentation<\/a><\/span><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Azure Policy erm\u00f6glicht das Erstellen und den Betrieb von Azure Ressourcen nach festgelegten Richtlinien. In diesem Blog-Beitrag erfahren Sie mehr \u00fcber Azure Policies und deren praktische Anwendung.<\/p>\n","protected":false},"author":5,"featured_media":2934,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_tribe_events_control_status":"","_tribe_events_control_status_canceled_reason":"","_tribe_events_control_status_postponed_reason":"","_tribe_events_control_online":"","_tribe_events_control_online_url":"","footnotes":""},"categories":[104],"tags":[165,166,167,139,110],"class_list":["post-1895","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-azure","tag-arm","tag-azure-policy","tag-azure-resource-manager","tag-cloud-operations","tag-devops"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Cloudrichtlinien mit Azure Policy - white duck<\/title>\n<meta name=\"description\" content=\"In diesem Blogpost lesen Sie \u00fcber den Cloudrichtlinien mit Azure Policy.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/whiteduck.de\/en\/cloudrichtlinien-mit-azure-policy\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cloudrichtlinien mit Azure Policy - white duck\" \/>\n<meta property=\"og:description\" content=\"In diesem Blogpost lesen Sie \u00fcber den Cloudrichtlinien mit Azure Policy.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/whiteduck.de\/en\/cloudrichtlinien-mit-azure-policy\/\" \/>\n<meta property=\"og:site_name\" content=\"white duck\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/whiteduckgmbh\" \/>\n<meta property=\"article:published_time\" content=\"2018-12-07T18:59:52+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-12-07T14:27:49+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/whiteduck.de\/wp-content\/uploads\/whiteduck-azure-policies.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2544\" \/>\n\t<meta property=\"og:image:height\" content=\"1696\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Daniel Kerschagl\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@whiteduck_gmbh\" \/>\n<meta name=\"twitter:site\" content=\"@whiteduck_gmbh\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Daniel Kerschagl\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/cloudrichtlinien-mit-azure-policy\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/cloudrichtlinien-mit-azure-policy\\\/\"},\"author\":{\"name\":\"Daniel Kerschagl\",\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/#\\\/schema\\\/person\\\/6eb0fb6f2c9f0b58b39970d83b620037\"},\"headline\":\"Cloudrichtlinien mit Azure Policy\",\"datePublished\":\"2018-12-07T18:59:52+00:00\",\"dateModified\":\"2021-12-07T14:27:49+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/cloudrichtlinien-mit-azure-policy\\\/\"},\"wordCount\":761,\"commentCount\":137,\"image\":{\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/cloudrichtlinien-mit-azure-policy\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/whiteduck.de\\\/wp-content\\\/uploads\\\/whiteduck-azure-policies.jpg\",\"keywords\":[\"ARM\",\"Azure Policy\",\"Azure Resource Manager\",\"Cloud Operations\",\"DevOps\"],\"articleSection\":[\"Azure\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/whiteduck.de\\\/en\\\/cloudrichtlinien-mit-azure-policy\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/cloudrichtlinien-mit-azure-policy\\\/\",\"url\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/cloudrichtlinien-mit-azure-policy\\\/\",\"name\":\"Cloudrichtlinien mit Azure Policy - white duck\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/cloudrichtlinien-mit-azure-policy\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/cloudrichtlinien-mit-azure-policy\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/whiteduck.de\\\/wp-content\\\/uploads\\\/whiteduck-azure-policies.jpg\",\"datePublished\":\"2018-12-07T18:59:52+00:00\",\"dateModified\":\"2021-12-07T14:27:49+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/#\\\/schema\\\/person\\\/6eb0fb6f2c9f0b58b39970d83b620037\"},\"description\":\"In diesem Blogpost lesen Sie \u00fcber den Cloudrichtlinien mit Azure Policy.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/cloudrichtlinien-mit-azure-policy\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/whiteduck.de\\\/en\\\/cloudrichtlinien-mit-azure-policy\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/cloudrichtlinien-mit-azure-policy\\\/#primaryimage\",\"url\":\"https:\\\/\\\/whiteduck.de\\\/wp-content\\\/uploads\\\/whiteduck-azure-policies.jpg\",\"contentUrl\":\"https:\\\/\\\/whiteduck.de\\\/wp-content\\\/uploads\\\/whiteduck-azure-policies.jpg\",\"width\":2544,\"height\":1696},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/cloudrichtlinien-mit-azure-policy\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cloudrichtlinien mit Azure Policy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/\",\"name\":\"white duck\",\"description\":\"Your Partner for Microsoft Azure &amp; AI\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/#\\\/schema\\\/person\\\/6eb0fb6f2c9f0b58b39970d83b620037\",\"name\":\"Daniel Kerschagl\",\"url\":\"https:\\\/\\\/whiteduck.de\\\/en\\\/author\\\/daniel-kerschagl\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Cloudrichtlinien mit Azure Policy - white duck","description":"In diesem Blogpost lesen Sie \u00fcber den Cloudrichtlinien mit Azure Policy.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/whiteduck.de\/en\/cloudrichtlinien-mit-azure-policy\/","og_locale":"en_US","og_type":"article","og_title":"Cloudrichtlinien mit Azure Policy - white duck","og_description":"In diesem Blogpost lesen Sie \u00fcber den Cloudrichtlinien mit Azure Policy.","og_url":"https:\/\/whiteduck.de\/en\/cloudrichtlinien-mit-azure-policy\/","og_site_name":"white duck","article_publisher":"https:\/\/www.facebook.com\/whiteduckgmbh","article_published_time":"2018-12-07T18:59:52+00:00","article_modified_time":"2021-12-07T14:27:49+00:00","og_image":[{"width":2544,"height":1696,"url":"https:\/\/whiteduck.de\/wp-content\/uploads\/whiteduck-azure-policies.jpg","type":"image\/jpeg"}],"author":"Daniel Kerschagl","twitter_card":"summary_large_image","twitter_creator":"@whiteduck_gmbh","twitter_site":"@whiteduck_gmbh","twitter_misc":{"Written by":"Daniel Kerschagl","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/whiteduck.de\/en\/cloudrichtlinien-mit-azure-policy\/#article","isPartOf":{"@id":"https:\/\/whiteduck.de\/en\/cloudrichtlinien-mit-azure-policy\/"},"author":{"name":"Daniel Kerschagl","@id":"https:\/\/whiteduck.de\/en\/#\/schema\/person\/6eb0fb6f2c9f0b58b39970d83b620037"},"headline":"Cloudrichtlinien mit Azure Policy","datePublished":"2018-12-07T18:59:52+00:00","dateModified":"2021-12-07T14:27:49+00:00","mainEntityOfPage":{"@id":"https:\/\/whiteduck.de\/en\/cloudrichtlinien-mit-azure-policy\/"},"wordCount":761,"commentCount":137,"image":{"@id":"https:\/\/whiteduck.de\/en\/cloudrichtlinien-mit-azure-policy\/#primaryimage"},"thumbnailUrl":"https:\/\/whiteduck.de\/wp-content\/uploads\/whiteduck-azure-policies.jpg","keywords":["ARM","Azure Policy","Azure Resource Manager","Cloud Operations","DevOps"],"articleSection":["Azure"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/whiteduck.de\/en\/cloudrichtlinien-mit-azure-policy\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/whiteduck.de\/en\/cloudrichtlinien-mit-azure-policy\/","url":"https:\/\/whiteduck.de\/en\/cloudrichtlinien-mit-azure-policy\/","name":"Cloudrichtlinien mit Azure Policy - white duck","isPartOf":{"@id":"https:\/\/whiteduck.de\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/whiteduck.de\/en\/cloudrichtlinien-mit-azure-policy\/#primaryimage"},"image":{"@id":"https:\/\/whiteduck.de\/en\/cloudrichtlinien-mit-azure-policy\/#primaryimage"},"thumbnailUrl":"https:\/\/whiteduck.de\/wp-content\/uploads\/whiteduck-azure-policies.jpg","datePublished":"2018-12-07T18:59:52+00:00","dateModified":"2021-12-07T14:27:49+00:00","author":{"@id":"https:\/\/whiteduck.de\/en\/#\/schema\/person\/6eb0fb6f2c9f0b58b39970d83b620037"},"description":"In diesem Blogpost lesen Sie \u00fcber den Cloudrichtlinien mit Azure Policy.","breadcrumb":{"@id":"https:\/\/whiteduck.de\/en\/cloudrichtlinien-mit-azure-policy\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/whiteduck.de\/en\/cloudrichtlinien-mit-azure-policy\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/whiteduck.de\/en\/cloudrichtlinien-mit-azure-policy\/#primaryimage","url":"https:\/\/whiteduck.de\/wp-content\/uploads\/whiteduck-azure-policies.jpg","contentUrl":"https:\/\/whiteduck.de\/wp-content\/uploads\/whiteduck-azure-policies.jpg","width":2544,"height":1696},{"@type":"BreadcrumbList","@id":"https:\/\/whiteduck.de\/en\/cloudrichtlinien-mit-azure-policy\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/whiteduck.de\/en\/"},{"@type":"ListItem","position":2,"name":"Cloudrichtlinien mit Azure Policy"}]},{"@type":"WebSite","@id":"https:\/\/whiteduck.de\/en\/#website","url":"https:\/\/whiteduck.de\/en\/","name":"white duck","description":"Your Partner for Microsoft Azure &amp; AI","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/whiteduck.de\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/whiteduck.de\/en\/#\/schema\/person\/6eb0fb6f2c9f0b58b39970d83b620037","name":"Daniel Kerschagl","url":"https:\/\/whiteduck.de\/en\/author\/daniel-kerschagl\/"}]}},"_links":{"self":[{"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/posts\/1895","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/comments?post=1895"}],"version-history":[{"count":0,"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/posts\/1895\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/media\/2934"}],"wp:attachment":[{"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/media?parent=1895"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/categories?post=1895"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/tags?post=1895"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}