|
| 1 | +{ |
| 2 | + "parameters": { |
| 3 | + "policyEventsResource": "default", |
| 4 | + "subscriptionId": "fffedd8f-ffff-fffd-fffd-fffed2f84852", |
| 5 | + "api-version": "2019-10-01", |
| 6 | + "$from": "2018-01-01T00:00:00Z", |
| 7 | + "$filter": "PolicyDefinitionAction eq 'deny'", |
| 8 | + "$apply": "groupby((PolicyAssignmentId, PolicyDefinitionId, ResourceId))/groupby((PolicyAssignmentId, PolicyDefinitionId), aggregate($count as NumDeniedResources))", |
| 9 | + "$orderby": "NumDeniedResources desc", |
| 10 | + "$top": 10 |
| 11 | + }, |
| 12 | + "responses": { |
| 13 | + "200": { |
| 14 | + "body": { |
| 15 | + "@odata.context": "https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default", |
| 16 | + "@odata.count": 6, |
| 17 | + "value": [ |
| 18 | + { |
| 19 | + "@odata.id": null, |
| 20 | + "@odata.context": "https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default/$entity", |
| 21 | + "policyAssignmentId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/resourcegroups/myResourceGroup1/providers/microsoft.authorization/policyassignments/0591f497c35344fcbaf7a393", |
| 22 | + "policyDefinitionId": "/providers/microsoft.authorization/policydefinitions/e56962a6-4747-49cd-b67b-bf8b01975c4c", |
| 23 | + "NumDeniedResources": 3 |
| 24 | + }, |
| 25 | + { |
| 26 | + "@odata.id": null, |
| 27 | + "@odata.context": "https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default/$entity", |
| 28 | + "policyAssignmentId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/resourcegroups/myResourceGroup1/providers/microsoft.authorization/policyassignments/myassignment1", |
| 29 | + "policyDefinitionId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/microsoft.authorization/policydefinitions/mydefinition1", |
| 30 | + "NumDeniedResources": 2 |
| 31 | + }, |
| 32 | + { |
| 33 | + "@odata.id": null, |
| 34 | + "@odata.context": "https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default/$entity", |
| 35 | + "policyAssignmentId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/resourcegroups/myResourceGroup1/providers/microsoft.authorization/policyassignments/myassignment1", |
| 36 | + "policyDefinitionId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/microsoft.authorization/policydefinitions/mydefinition2", |
| 37 | + "NumDeniedResources": 2 |
| 38 | + }, |
| 39 | + { |
| 40 | + "@odata.id": null, |
| 41 | + "@odata.context": "https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default/$entity", |
| 42 | + "policyAssignmentId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/resourcegroups/5bc427ca-0089-4d0d-85bd-e98d1e40b3bf/providers/microsoft.authorization/policyassignments/storageaccountsku", |
| 43 | + "policyDefinitionId": "/providers/microsoft.authorization/policydefinitions/7433c107-6db4-4ad1-b57a-a76dce0154a1", |
| 44 | + "NumDeniedResources": 1 |
| 45 | + }, |
| 46 | + { |
| 47 | + "@odata.id": null, |
| 48 | + "@odata.context": "https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default/$entity", |
| 49 | + "policyAssignmentId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/resourcegroups/myResourceGroup2/providers/microsoft.authorization/policyassignments/da43b50031bf4bce84584faa", |
| 50 | + "policyDefinitionId": "/providers/microsoft.authorization/policydefinitions/1e30110a-5ceb-460c-a204-c1c3969c6d62", |
| 51 | + "NumDeniedResources": 1 |
| 52 | + }, |
| 53 | + { |
| 54 | + "@odata.id": null, |
| 55 | + "@odata.context": "https://management.azure.com/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/Microsoft.PolicyInsights/policyEvents/$metadata#default/$entity", |
| 56 | + "policyAssignmentId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/resourcegroups/myResourceGroup2/providers/microsoft.authorization/policyassignments/myassignment2", |
| 57 | + "policyDefinitionId": "/subscriptions/fffedd8f-ffff-fffd-fffd-fffed2f84852/providers/microsoft.authorization/policydefinitions/mydefinition3", |
| 58 | + "NumDeniedResources": 1 |
| 59 | + } |
| 60 | + ] |
| 61 | + } |
| 62 | + } |
| 63 | + } |
| 64 | +} |
0 commit comments