I Need help with a policy to Azure Budget

Wellington Adilson Dorado 0

Hello, I would like to request help with a problem I am facing. I am trying to apply a policy that essentially prevents deployments if the subscription's budget exceeds 200. Is there any way to do this with a policy? If not, how can I enforce a cost limit, for example, that I do not want to exceed that value? I have already tested at least 30 JSON scripts aiming to implement a cost policy that denies deployments, but it's not working. Could someone please help me, or implement a forced limit for the entire "Pay As You Go" subscription, or a policy that prevents deployments once the current subscription budget exceeds 200?

Ryan Hill 29,131 Reputation points Microsoft Employee

2024-11-27T15:52:01.0033333+00:00

@Wellington Adilson Dorado can you share links or snippets to the samples you've tried thus far?

Wellington Adilson Dorado 0

i try a lot of samples, heres two, i want a way to disable my account when i complete the budget, and in the next month back to normal without runbooks or automation accounts

{
  "properties": {
    "displayName": "Enforce Cost Limits",
    "policyType": "Custom",
    "mode": "All",
    "metadata": {
      "category": "Cost Management"
    },
    "parameters": {},
    "policyRule": {
      "if": {
        "allOf": [
          {
            "field": "type",
            "equals": "Microsoft.Compute/virtualMachines"
          },
          {
            "field": "Microsoft.Resources/subscriptions/resourceGroups/costCenter",
            "equals": "12345"
          }
        ]
      },
      "then": {
        "effect": "deny"
      }
    }
  }
}

resource "azurerm_policy_definition" "block_deployments" {
  name         = "block-deployments-when-budget-exceeded"
  policy_type  = "Custom"
  mode         = "All"  # "Indexed" não é necessário neste caso
  display_name = "Bloquear deployments quando o orçamento for excedido"
  description  = "Esta política bloqueia novos deployments quando o custo da assinatura exceder o limite definido."

  policy_rule = <<POLICY_RULE
{
  "if": {
    "allOf": [
      {
        "field": "type",
        "equals": "Microsoft.Resources/deployments"
      },
      {
        "condition": {
          "costManagement/query": {
            "timeframe": "MonthToDate",
            "type": "ActualCost",
            "dataset": {
              "aggregation": {
                "totalCost": {
                  "name": "Cost",
                  "function": "Sum"
                }
              },
              "granularity": "None",
              "filter": {
                "and": [
                  {
                    "dimensions": {
                      "name": "SubscriptionId",
                      "operator": "In",
                      "values": [
                        "<subscription_id>" 
                      ]
                    }
                  }
                ]
              }
            }
          },
          "greaterOrEquals": "[parameters('costLimit')]"
        }
      }
    ]
  },
  "then": {
    "effect": "deny",
    "details": {
      "type": "Custom",
      "message": "O orçamento da subscription foi excedido. Novos deployments estão bloqueados."
    }
  }
}
POLICY_RULE

  parameters = jsonencode({
    "costLimit": {
      "type": "Number",
      "metadata": {
        "displayName": "Limite de Custo",
        "description": "O valor máximo permitido para a subscription."
      },
      "defaultValue": 200
    }
  })
}

SadiqhAhmed-MSFT 47,496 Reputation points Microsoft Employee

2024-11-27T17:19:22.1366667+00:00

@Wellington Adilson Dorado I suggest you refer to this link - https://learn.microsoft.com/en-us/azure/cost-management-billing/manage/cost-management-budget-scenario

Hope it helps!
Wellington Adilson Dorado 0 Reputation points

2024-11-27T21:59:13.61+00:00

i need help with this =(
SadiqhAhmed-MSFT 47,496 Reputation points Microsoft Employee

2024-11-29T17:35:51.1066667+00:00

@Wellington Adilson Dorado The link I shared should help you with your requirement. Not sure, what help you need here. Appreciate if you could elaborate.

Ryan Hill 29,131 Microsoft Employee

@Wellington Adilson Dorado try the following policy

{
  "properties": {
    "displayName": "Prevent deployment if cost management budget exceeds $200",
    "policyType": "Custom",
    "mode": "All",
    "description": "This policy prevents the deployment of resources if the cost management budget exceeds $200.",
    "metadata": {
      "category": "Cost Management"
    },
    "parameters": {
      "budgetAmount": {
        "type": "Number",
        "metadata": {
          "displayName": "Budget Amount",
          "description": "The budget amount to enforce."
        },
        "defaultValue": 200
      }
    },
    "policyRule": {
      "if": {
        "allOf": [
          {
            "field": "Microsoft.Resources/subscriptions/resourceGroups/costManagementBudget",
            "greaterThan": "[parameters('budgetAmount')]"
          }
        ]
      },
      "then": {
        "effect": "deny"
      }
    }
  }
}

The policy will need to be assigned to the appropriate scope (e.g. resource group)

Share via

I Need help with a policy to Azure Budget

Your answer