Microsoft Azure - Limit resource group elements - custom policy

Question

my goal is to limit the creation of resource type per owner/collaborator of a specific Resource Group. Example: User_Group_XXX accessed by account YYY:

• MAX 2 VM - Standard D2s v3
• MAX 1 Kubernetes Cluster with 2 node - Standard DS2 v2

NO more than that and NO other type of resources.

How can I include those limits?

Answer 1

this is not possible by definition. Azure Policy looks at individual resource properties, so there is no way to have it do something like that (so check other resources and apply policy based on those resource to a the resource in question).

although, you could easily create a policy to only allow virtual machines\\aks clusters.

again, policies cannot be scoped to users