policy01-isHnsEnabled.json

{
	"type": "Microsoft.Authorization/policyDefinitions",
	"name": "azure-data-lake-storage-v3-hns-audit",
	"properties": {
		"displayName": "Azure Data Lake Storage v3 - Audit hierarchical namespace on Storage account",
		"description": "This policy audits hierarchical namespace is enabled on Storage account.",
		"mode": "All",
		"parameters": {
			"productTagFilter": {
				"type": "String",
				"metadata": {
					"displayName": "Product Tag Filter",
					"description": "The filter for the Product tag applied to Storage account resource. This policy only applies to resources that match the filter."
				}
			}
		},
		"policyRule": {
			"if": {
				"allOf": [
					{
						"field": "tags['Product']",
						"like": "[parameters('productTagFilter')]"
					},
					{
						"allOf": [
							{
								"field": "type",
								"equals": "Microsoft.Storage/storageAccounts"
							},
							{
								"field": "Microsoft.Storage/storageAccounts/isHnsEnabled",
								"exists": false
							}
						]
					}
				]
			},
			"then": {
				"effect": "audit"
			}
		}
	}
}