policy "restrict-allowed-vm-types" {
    enforcement_level = "soft-mandatory"
}

policy "restrict-app-service-to-https" {
    enforcement_level = "advisory"
}

policy "enforce-mandatory-tags" {
    enforcement_level = "hard-mandatory"
}