{
  "properties": {
    "displayName": "Azure Cognitive Search service should use a SKU that supports private link",
    "policyType": "BuiltIn",
    "mode": "Indexed",
    "description": "With supported SKUs of Azure Cognitive Search, Azure Private Link lets you connect your virtual network to Azure services without a public IP address at the source or destination. The private link platform handles the connectivity between the consumer and services over the Azure backbone network. By mapping private endpoints to your Search service, data leakage risks are reduced. Learn more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.",
    "metadata": {
      "version": "1.0.0",
      "category": "Search"
    },
    "parameters": {
      "effect": {
        "type": "String",
        "metadata": {
            "displayName": "Effect",
            "description": "Enable or Deny the execution of the policy"
        },
        "allowedValues": [
            "Audit",
            "Deny",
            "Disabled"
        ],
        "defaultValue": "Audit"
      }
    },
    "policyRule": {
      "if": {
        "allOf": [
          {
            "field": "type",
            "equals": "Microsoft.Search/searchServices"
          },
          {
            "field": "Microsoft.Search/searchServices/sku.name",
            "equals": "free"
          }
        ]
      },
      "then": {
        "effect": "[parameters('effect')]"
      }
    }
  },
  "id": "/providers/Microsoft.Authorization/policyDefinitions/a049bf77-880b-470f-ba6d-9f21c530cf83",
  "name": "a049bf77-880b-470f-ba6d-9f21c530cf83"
}