{
   "properties": {
      "displayName": "Audit Virtual Machine Scale Sets without automatic OS upgrade enabled",
      "mode": "Indexed",
      "description": "This policy audits any Virtual Machine Scale Set that does not have automatic OS upgrade enabled.",
      "metadata": {
         "category": "Compute"
      },
      "parameters": {},
      "policyRule": {
         "if": {
            "allOf": [
               {
                  "field": "type",
                  "equals": "Microsoft.Compute/virtualMachineScaleSets"
               },
               {
                  "field": "Microsoft.Compute/VirtualMachineScaleSets/upgradePolicy.automaticOSUpgrade",
                  "notEquals": "true"
               }
            ]
         },
         "then": {
            "effect": "audit"
         }
      }
   }
}