Upload option block on dedicated device using Intune or AAD conitional access policy

@Banty yadav, Thanks for posting in Q&A.

Based on my research, we can create a conditional access policy to prevent upload of unlabeled files or Block potential malware.

In the Session we can select Use custom policy under Use Conditional Access App Control and configure a custom policy which meet your need.

https://video2.skills-academy.com/en-gb/defender-cloud-apps/proxy-intro-aad#supported-apps-and-clients

Hope above information can be helpful.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.