Framework/Configurations/SubscriptionSecurity/Subscription.ARMPolicies.json

{
   "Version": "3.1809.0",
   "Policies": [
      {
         "policyDefinitionName": "AzSK_ARMPol_Deny_Classic_Resource_Create",
         "policyDefinition": "{\"if\":{\"anyOf\":[{\"field\":\"type\",\"like\":\"Microsoft.ClassicCompute/*\"},{\"field\":\"type\",\"like\":\"microsoft.classicStorage/*\"},{\"field\":\"type\",\"like\":\"Microsoft.ClassicNetwork/*\"}]},\"then\":{\"effect\":\"deny\"}}",
         "description": "Policy to deny upon creation of classic/v1 (i.e., ASM-based) resources",
         "tags": [
            "Mandatory"
         ],
         "applicableForRGs": ["*"],
         "enabled": true,
         "scope": "/subscriptions/$subscriptionId"
      }
   ],
   "DeprecatedPolicies" : ["AzSK_ARMPol_Audit_Classic_Resource_Create",
      "AzSK_ARMPol_Audit_NonHBI_Resource_Create",
      "AzSK_ARMPol_Audit_Job_Scheduler_Free_Tier",
      "AzSK_ARMPol_Audit_SQL_Basic_Create",
      "AzSK_ARMPol_Audit_NonGRS_Storage_SKU",
      "AzSK_ARMPol_Audit_Old_SQL_Version"
   ]
}