Status: IN
Azure Policy best practice: start with audit/auditIfNotExists effects before enforcement effects (deny, modify, deployIfNotExists).
Source: entries/2026/03/11/policy-overview.md
JSON