azure-policy-custom-definition

Type: decision

Decision

When no built-in policy provides the required Deny or DeployIfNotExists effect, a custom definition is authored to close the gap.

Why

Without custom policies, Audit-only coverage looks like enforcement but the violation still occurs.

Links

• azure-policy-naming-convention — The naming convention constrains custom definitions to Deny, DeployIfNotExists, or Modify effects — the effect determines the assignment prefix.

← Back to all decisions