Azure Policy to turn Firewall on

Question

There is a requirement where I need to write a policy to turn Firewall ON for DataLake Store. this policy should be written in JSON and need to deploy on Azure.

Anyone, who can help me on JSON part.

Answer 1

To enable firewall when creating the DataLake Store , you could refer to my sample policy, it works fine on my side.

{
  "if": {
    "allOf": [
      {
        "field": "type",
        "equals": "Microsoft.DataLakeStore/accounts"
      },
      {
        "field": "Microsoft.DataLakeStore/accounts/firewallState",
        "equals": "Disabled"
      }
    ]
  },
  "then": {
    "effect": "deny"
  }
}

Answer 2

You need to use Append mode in effect to change the value.

{
   "if": {
      "field": "Microsoft.DataLakeStore/accounts/firewallState",
      "equals": "Disabled"
   },
   "then": {
      "effect": "append",
      "details": [
         {
            "field": "Microsoft.DataLakeStore/accounts/firewallState",
            "value": "Enabled"
         }
      ]
   }
}