I have this bicep template to deploy two storage resources
@description('Tags for the storage resources.')
param tags object
@description('Location for all resources, defaults to the Resource Group location')
param location string = resourceGroup().location
var storageAccounts = [
{
namePrefix: 'archsa'
accessTier: 'Cool'
}
{
namePrefix: 'backupsa'
accessTier: 'Hot'
}
]
resource saResources 'Microsoft.Storage/storageAccounts@2021-02-01' = [for sa in storageAccounts: {
name: '${sa.namePrefix}${uniqueString(resourceGroup().id)}'
location: location
tags: tags
sku: {
name: 'Standard_LRS'
}
kind: 'StorageV2'
properties: {
accessTier: sa.accessTier
}
}]
I want to add a lock to each resource if the Tags.Env parameter = 'prod'. What's the best way to do this?