{
   "properties": {
      "displayName": "[Deprecated]: Require blob encryption for storage accounts",
      "policyType": "BuiltIn",
      "mode": "Indexed",
      "description": "This policy ensures blob encryption for storage accounts is turned on. It only applies to Microsoft.Storage resource types, not other storage providers. This policy is deprecated because storage blob encryption is now enabled by default, and can no longer be disabled.",
      "metadata": {
         "version": "1.0.0-deprecated",
         "category": "Storage",
         "deprecated": true
      },
      "parameters": {},
      "policyRule": {
         "if": {
            "allOf": [
               {
                  "field": "type",
                  "equals": "Microsoft.Storage/storageAccounts"
               },
               {
                  "field": "Microsoft.Storage/storageAccounts/enableBlobEncryption",
                  "equals": "false"
               }
            ]
         },
         "then": {
            "effect": "deny"
         }
      }
   },
   "id": "/providers/Microsoft.Authorization/policyDefinitions/7c5a74bf-ae94-4a74-8fcf-644d1e0e6e6f",
   "name": "7c5a74bf-ae94-4a74-8fcf-644d1e0e6e6f"
}