Azure policies

Assign Policy

# Assign policy to recource group
$rg = Get-AzResourceGroup -name RG1
$policy_def = Get-AzPolicyDefinition | ?{ $_.Properties.Displayname -eq "Audit VMs that do not use managed disks" }
New-AzPolicyAssignment -Name "Check for managed disks" -DisplayName "Check for managed disks" -Scope $rg.ResourceId -PolicyDefinition $policy_def