{
   "properties":{
      "displayName":"App Service Apps should be injected into a virtual network",
      "policyType":"BuiltIn",
      "mode":"Indexed",
      "description":"Injecting App Service Apps in a virtual network unlocks advanced App Service networking and security features and provides you with greater control over your network security configuration. Learn more at: https://docs.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.",
      "metadata":{
         "version":"1.0.0",
         "category":"App Service"
      },
      "parameters":{
         "effect":{
            "type":"string",
            "defaultValue":"Audit",
            "allowedValues":[
               "Audit",
               "Deny",
               "Disabled"
            ],
            "metadata":{
               "displayName":"Effect",
               "description":"Enable or disable the execution of the policy"
            }
         }
      },
      "policyRule":{
         "if":{
            "allOf":[
               {
                  "field":"type",
                  "equals":"Microsoft.Web/sites"
               },
               {
                  "field":"Microsoft.Web/sites/virtualNetworkSubnetId",
                  "equals":""
               }
            ]
         },
         "then":{
            "effect":"[parameters('effect')]"
         }
      }
   },
   "id":"/providers/Microsoft.Authorization/policyDefinitions/72d04c29-f87d-4575-9731-419ff16a2757",
   "name":"72d04c29-f87d-4575-9731-419ff16a2757"
}