azureazure-security

Deactivate azure security policy for a specific resource


How can I deactivate an azure security policy for a specific resource? Policy shall be still applied to other resource in resource group / subscription.


Solution

  • Azure policy is assigned to a specific scope(management group, subscription, or resource group). I am afraid that there is no way to deactivate an Azure security policy for a specific resource.

    However, you can exclude a subscope from the policy assignment.

    If the scope is a group, you can just move that resource out of that group.

    If the scope is subscription, you can exclude a resource group in that subscription that assigned different policy.