{
   "properties": {
      "displayName": "Enforce encryption on Data Lake Store accounts",
      "mode": "Indexed",
      "description": "This policy ensures encryption is enabled on all Data Lake Store accounts",
      "metadata": {
         "category": "Data Lake"
      },
      "parameters": {},
      "policyRule": {
         "if": {
            "allOf": [
               {
                  "field": "type",
                  "equals": "Microsoft.DataLakeStore/accounts"
               },
               {
                  "field": "Microsoft.DataLakeStore/accounts/encryptionState",
                  "equals": "Disabled"
               }
            ]
         },
         "then": {
            "effect": "deny"
         }
      }
   }
}
