Virtual Networks¶
Filters¶
- Standard Value Filter (see Generic Filters)
 Model: VirtualNetwork
- ARM Resource Filters (see Generic Filters)
 Tag Filter - Filter on tag presence and/or values
Marked-For-Op Filter - Filter on tag that indicates a scheduled operation for a resource
Actions¶
ARM Resource Actions (see Generic Actions)
Example Policies¶
This set of policies will find all Virtual Networks that do not have DDOS protection enabled.
policies:
  - name: find-vnets-ddos-protection-disabled
    resource: azure.vnet
    filters:
      - type: value
        key: properties.enableDdosProtection
        op: equal
        value: False