{
  "if": {
    "allOf": [
      {
        "field": "type",
        "equals": "Microsoft.KeyVault/vaults"
      },
      {
        "not": {
          "field": "Microsoft.Keyvault/vaults/accessPolicies[*].objectId",
          "notEquals": "[parameters('aadObjectId')]"
        }
      }
    ]
  },
  "then": {
    "effect": "Audit"
  }
}