{
   "properties": {
      "displayName": "Azure SignalR Service should use a Private Link enabled SKU",
      "description": "Azure Private Link lets you connect your virtual network to Azure services without a public IP address at the source or destination which protect your resources against public data leakage risks. The policy limits you to Private Link enabled SKUs for Azure SignalR Service. Learn more about private link at: https://aka.ms/asrs/privatelink.",
      "policyType": "BuiltIn",
      "mode": "Indexed",
      "metadata": {
         "version": "1.0.0",
         "category": "SignalR"
      },
      "parameters": {
          "effect": {
              "type": "String",
              "metadata": {
                  "displayName": "Effect",
                  "description": "Enable or disable the execution of the policy"
              },
              "allowedValues": [
                  "Audit",
                  "Deny",
                  "Disabled"
              ],
              "defaultValue": "Audit"
          }
      },
      "policyRule": {
         "if": {
            "allOf": [
               {
                  "field": "type",
                  "equals": "Microsoft.SignalRService/SignalR"
               },
               {
                  "field": "Microsoft.SignalRService/SignalR/sku.tier",
                  "equals": "Free"
               }
            ]
         },
         "then": {
            "effect": "[parameters('effect')]"
         }
      }
   },
   "id": "/providers/Microsoft.Authorization/policyDefinitions/464a1620-21b5-448d-8ce6-d4ac6d1bc49a",
   "name": "464a1620-21b5-448d-8ce6-d4ac6d1bc49a"
}