policy "restrict-allowed-vm-types" { enforcement_level = "soft-mandatory" } policy "restrict-app-service-to-https" { enforcement_level = "advisory" } policy "enforce-mandatory-tags" { enforcement_level = "hard-mandatory" }