Exempting a Resource from Azure Policy Initiative

1

Navigate to Azure Portal.

2

We are using a Virtual Machine resource type in this example, but this applies to any Azure Resource which is in scope of Azure Security Benchmark or ISO.

Under Azure Services, click on Virtual Machines.

3

Select the resource you would like to configure tags for Azure Policy Exceptions.

4

Under the Virtual Machine overview, click on Tags.

5

Create the swoGlobalExemption if tag does not exist.
The possible values for swoGlobalExemption are either [SWO]_ISO27001_2013 or [SWO]_AzureSecurityBenchmark.

Select the swoGlobalExemption tag and configure value with the ID of the policy initiative that you want this resource to be exempted to. Click on Apply.