{
   "if": {
      "allOf": [
         {
            "field": "type",
            "equals": "Microsoft.DataLakeStore/accounts"
         },
         {
            "field": "Microsoft.DataLakeStore/accounts/encryptionState",
            "equals": "Disabled"
         }
      ]
   },
   "then": {
      "effect": "deny"
   }
}