Hi @Bones ,
the only option I know so far is to implement a an Azure Policy that only allows to deploy free services.
For instance allow to deploy a B1s VMs, deny all other VM SKUs.
The main issue I can see with this solution: You might not be able to prevent the deployment of multiple B1s VMs, but only 750 hours of B1s VM is free (as far as I am aware of).
The code might look like this (not tested):
{
"if": {
"allOf": [
{
"field": "type",
"in": [
"Microsoft.Compute/virtualMachines"
]
},
{
"field": "Microsoft.Compute/virtualMachines/sku.name",
"in": ["Standard_B1s"],
"in": ["Standard_B2pts_v2"],
"in": ["Standard_B2ats_v2"]
},
]
},
"then": {
"effect": "deny"
}
}
You can add Policy rule sets for storage accounts and other services the same way.
(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)
Regards
Andreas Baumgarten