Check Azure Policy compliance task

Azure DevOps Services | Azure DevOps Server 2020 | Azure DevOps Server 2019

Note

This task was renamed from Security and Compliance Assessment to Check Azure Policy compliance with the release of Azure DevOps Server 2019.1. The YAML name for the task was unchanged from AzurePolicyCheckGate@0.

Azure Policy allows you to assess and enforce resource compliance against defined IT policies. Use this task in a gate to identify, analyze and evaluate the security risks, and determine the mitigation measures required to reduce the risks.

Demands

Can be used only as a gate. This task is not supported in a build or release pipeline.

YAML snippet

# Check Azure Policy compliance
# Security and compliance assessment for Azure Policy
- task: AzurePolicyCheckGate@0
  inputs:
    azureSubscription: 
    #resourceGroupName: # Optional
    #resources: # Optional

Important

Service connections cannot be specified by variable.

Arguments

Parameters	Description
Azure subscription	(Required) Select the Azure Resource Manager subscription on which to enforce the policies.
Resource group	Select the Resource Group or specify a variable name.
Resource name	Select the name of the Azure resources for which you want to check policy compliance.