AzUpdateMgmtCenter_ScheduledPatching_DINE.json

{
  "properties": {
    "displayName": "Schedule recurring updates using Azure Update Manager",
    "policyType": "BuiltIn",
    "mode": "Indexed",
    "description": "You can use Azure Update Manager in Azure to save recurring deployment schedules to install operating system updates for your Windows Server and Linux machines in Azure, in on-premises environments, and in other cloud environments connected using Azure Arc-enabled servers. This policy will also change the patch mode for the Azure Virtual Machine to 'AutomaticByPlatform'. See more: https://aka.ms/umc-scheduled-patching",
    "metadata": {
      "version": "3.12.0",
      "category": "Azure Update Manager"
    },
    "version": "3.12.0",
    "parameters": {
      "maintenanceConfigurationResourceId": {
        "type": "String",
        "metadata": {
          "displayName": "Maintenance Configuration ARM ID",
          "description": "ARM ID of Maintenance Configuration which will be used for scheduling.",
          "assignPermissions": true
        }
      },
      "resourceGroups": {
        "type": "Array",
        "metadata": {
          "displayName": "Resource groups",
          "description": "The list of resource groups from which machines need to be targeted. Example: [\"rg1\", \"rg2\"]."
        },
        "defaultValue": []
      },
      "operatingSystemTypes": {
        "type": "Array",
        "metadata": {
          "displayName": "Operating System types",
          "description": "The list of Operating System types from which machines need to be targeted."
        },
        "defaultValue": [
          "Windows",
          "Linux"
        ],
        "allowedValues": [
          "Windows",
          "Linux"
        ]
      },
      "locations": {
        "type": "Array",
        "metadata": {
          "displayName": "Machines locations",
          "description": "The list of locations from which machines need to be targeted.",
          "strongType": "location"
        },
        "defaultValue": []
      },
      "tagValues": {
        "type": "Array",
        "metadata": {
          "displayName": "Tags on machines",
          "description": "The list of tags that need to matched for getting target machines (case sensitive). Example: [ {\"key\": \"tagKey1\", \"value\": \"value1\"}, {\"key\": \"tagKey2\", \"value\": \"value2\"}]."
        },
        "defaultValue": []
      },
      "tagOperator": {
        "type": "String",
        "metadata": {
          "displayName": "Tags operator",
          "description": "Matching condition for resource tags"
        },
        "allowedValues": [
          "All",
          "Any"
        ],
        "defaultValue": "Any"
      },
      "effect": {
        "type": "String",
        "metadata": {
          "displayName": "Effect",
          "description": "Enable or disable the execution of the policy"
        },
        "allowedValues": [
          "DeployIfNotExists",
          "Disabled"
        ],
        "defaultValue": "DeployIfNotExists"
      }
    },
    "policyRule": {
      "if": {
        "allOf": [
          {
            "field": "type",
            "in": [
              "Microsoft.HybridCompute/machines",
              "Microsoft.Compute/virtualMachines"
            ]
          },
          {
            "anyOf": [
              {
                "value": "[empty(parameters('operatingSystemTypes'))]",
                "equals": true
              },
              {
                "allOf": [
                  {
                    "field": "type",
                    "in": [
                      "Microsoft.HybridCompute/machines"
                    ]
                  },
                  {
                    "field": "Microsoft.HybridCompute/machines/osName",
                    "in": "[parameters('operatingSystemTypes')]"
                  }
                ]
              },
              {
                "allOf": [
                  {
                    "field": "type",
                    "in": [
                      "Microsoft.Compute/virtualMachines"
                    ]
                  },
                  {
                    "anyOf": [
                      {
                        "allOf": [
                          {
                            "field": "Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType",
                            "exists": "true"
                          },
                          {
                            "field": "Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType",
                            "in": "[parameters('operatingSystemTypes')]"
                          },
                          {
                            "anyOf": [
                              {
                                "value": "[field('Microsoft.Compute/imageId')]",
                                "contains": "Microsoft.Compute/galleries"
                              },
                              {
                                "value": "[field('Microsoft.Compute/imageId')]",
                                "contains": "Microsoft.Compute/images"
                              }
                            ]
                          },
                          {
                            "field": "Microsoft.Compute/virtualMachines/osProfile.computerName",
                            "exists": "true"
                          }
                        ]
                      },
                      {
                        "allOf": [
                          {
                            "field": "Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType",
                            "exists": "true"
                          },
                          {
                            "field": "Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType",
                            "in": "[parameters('operatingSystemTypes')]"
                          },
                          {
                            "anyOf": [
                              {
                                "value": "[field('Microsoft.Compute/imageId')]",
                                "contains": "Microsoft.Compute/galleries"
                              },
                              {
                                "value": "[field('Microsoft.Compute/imageId')]",
                                "contains": "Microsoft.Compute/images"
                              },
                              {
                                "value": "[field('Microsoft.Compute/virtualMachines/storageProfile.osDisk.createOption')]",
                                "equals": "Attach"
                              }
                            ]
                          },
                          {
                            "field": "Microsoft.Compute/virtualMachines/osProfile.computerName",
                            "exists": "false"
                          },
                          {
                            "value": "[requestContext().apiVersion]",
                            "greaterOrEquals": "2023-07-01"
                          }
                        ]
                      },
                      {
                        "anyOf": [
                          {
                            "field": "Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType",
                            "in": "[parameters('operatingSystemTypes')]"
                          },
                          {
                            "allOf": [
                              {
                                "value": "Linux",
                                "in": "[parameters('operatingSystemTypes')]"
                              },
                              {
                                "field": "Microsoft.Compute/imageOffer",
                                "in": [
                                  "sles-standard",
                                  "sles-sapcal",
                                  "sles-sap-byos",
                                  "sles-sap",
                                  "sles-byos",
                                  "sles-15-sp4-sapcal",
                                  "sles-15-sp4-basic",
                                  "sles-15-sp4",
                                  "sles-15-sp3-sapcal",
                                  "sles-15-sp2-hpc",
                                  "sles-15-sp2-basic",
                                  "sles-15-sp1-sapcal",
                                  "sles",
                                  "sle-hpc-15-sp4",
                                  "sles-12-sp5",
                                  "sles-15-sp2",
                                  "centos-hpc",
                                  "centos-ci",
                                  "centos-lvm",
                                  "Centos",
                                  "rhel-sap-ha",
                                  "rhel-sap-apps",
                                  "RHEL-RAW",
                                  "RHEL",
                                  "aml-workstation",
                                  "aks",
                                  "oracle-database-19-3",
                                  "oracle-database",
                                  "oracle-linux",
                                  "cbl-mariner",
                                  "0001-com-ubuntu-server-jammy",
                                  "0001-com-ubuntu-pro-jammy",
                                  "0001-com-ubuntu-pro-focal",
                                  "0001-com-ubuntu-server-focal",
                                  "0001-com-ubuntu-pro-bionic",
                                  "UbuntuServer"
                                ]
                              }
                            ]
                          },
                          {
                            "allOf": [
                              {
                                "value": "Windows",
                                "in": "[parameters('operatingSystemTypes')]"
                              },
                              {
                                "field": "Microsoft.Compute/imageOffer",
                                "in": [
                                  "WindowsServer",
                                  "microsoftserveroperatingsystems-previews",
                                  "windowsserverhotpatch-previews",
                                  "sql2016sp1-ws2016",
                                  "sql2016sp2-ws201",
                                  "sql2017-ws2016",
                                  "sql2019-ws2019",
                                  "dynamics",
                                  "process-server"
                                ]
                              }
                            ]
                          }
                        ]
                      }
                    ]
                  }
                ]
              }
            ]
          },
          {
            "anyOf": [
              {
                "value": "[empty(parameters('locations'))]",
                "equals": true
              },
              {
                "field": "location",
                "in": "[parameters('locations')]"
              }
            ]
          },
          {
            "anyOf": [
              {
                "value": "[empty(parameters('resourceGroups'))]",
                "equals": true
              },
              {
                "value": "[resourceGroup().name]",
                "in": "[parameters('resourceGroups')]"
              }
            ]
          },
          {
            "anyOf": [
              {
                "value": "[empty(parameters('tagValues'))]",
                "equals": true
              },
              {
                "allOf": [
                  {
                    "value": "[empty(field('tags'))]",
                    "equals": false
                  },
                  {
                    "value": "[parameters('tagOperator')]",
                    "equals": "Any"
                  },
                  {
                    "count": {
                      "value": "[parameters('tagValues')]",
                      "name": "tagKvp",
                      "where": {
                        "value": "[length(intersection(createObject(current('tagKvp').key, current('tagKvp').value), field('tags')))]",
                        "greater": 0
                      }
                    },
                    "greater": 0
                  }
                ]
              },
              {
                "allOf": [
                  {
                    "value": "[empty(field('tags'))]",
                    "equals": false
                  },
                  {
                    "value": "[parameters('tagOperator')]",
                    "equals": "All"
                  },
                  {
                    "count": {
                      "value": "[parameters('tagValues')]",
                      "name": "tagKvp",
                      "where": {
                        "value": "[length(intersection(createObject(current('tagKvp').key, current('tagKvp').value), field('tags')))]",
                        "greater": 0
                      }
                    },
                    "equals": "[length(parameters('tagValues'))]"
                  }
                ]
              }
            ]
          },
          {
            "anyOf": [
              {
                "field": "type",
                "in": [
                  "Microsoft.HybridCompute/machines"
                ]
              },
              {
                "allOf": [
                  {
                    "field": "type",
                    "in": [
                      "Microsoft.Compute/virtualMachines"
                    ]
                  },
                  {
                    "anyOf": [
                      {
                        "allOf": [
                          {
                            "field": "Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType",
                            "exists": "true"
                          },
                          {
                            "anyOf": [
                              {
                                "value": "[field('Microsoft.Compute/imageId')]",
                                "contains": "Microsoft.Compute/galleries"
                              },
                              {
                                "value": "[field('Microsoft.Compute/imageId')]",
                                "contains": "Microsoft.Compute/images"
                              }
                            ]
                          },
                          {
                            "field": "Microsoft.Compute/virtualMachines/osProfile.computerName",
                            "exists": "true"
                          }
                        ]
                      },
                      {
                        "allOf": [
                          {
                            "field": "Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType",
                            "exists": "true"
                          },
                          {
                            "anyOf": [
                              {
                                "value": "[field('Microsoft.Compute/imageId')]",
                                "contains": "Microsoft.Compute/galleries"
                              },
                              {
                                "value": "[field('Microsoft.Compute/imageId')]",
                                "contains": "Microsoft.Compute/images"
                              },
                              {
                                "value": "[field('Microsoft.Compute/virtualMachines/storageProfile.osDisk.createOption')]",
                                "equals": "Attach"
                              }
                            ]
                          },
                          {
                            "field": "Microsoft.Compute/virtualMachines/osProfile.computerName",
                            "exists": "false"
                          },
                          {
                            "value": "[requestContext().apiVersion]",
                            "greaterOrEquals": "2023-07-01"
                          }
                        ]
                      },
                      {
                        "allOf": [
                          {
                            "field": "Microsoft.Compute/imagePublisher",
                            "equals": "Canonical"
                          }
                        ]
                      },
                      {
                        "allOf": [
                          {
                            "field": "Microsoft.Compute/imagePublisher",
                            "equals": "microsoftcblmariner"
                          },
                          {
                            "field": "Microsoft.Compute/imageOffer",
                            "equals": "cbl-mariner"
                          },
                          {
                            "field": "Microsoft.Compute/imageSKU",
                            "in": [
                              "cbl-mariner-1",
                              "1-gen2",
                              "cbl-mariner-2",
                              "cbl-mariner-2-gen2"
                            ]
                          }
                        ]
                      },
                      {
                        "allOf": [
                          {
                            "field": "Microsoft.Compute/imagePublisher",
                            "equals": "oracle"
                          },
                          {
                            "anyOf": [
                              {
                                "allOf": [
                                  {
                                    "field": "Microsoft.Compute/imageOffer",
                                    "equals": "oracle-linux"
                                  },
                                  {
                                    "anyOf": [
                                      {
                                        "field": "Microsoft.Compute/imageSKU",
                                        "in": [
                                          "8",
                                          "8-ci",
                                          "81",
                                          "81-ci",
                                          "81-gen2"
                                        ]
                                      },
                                      {
                                        "field": "Microsoft.Compute/imageSKU",
                                        "like": "7*"
                                      },
                                      {
                                        "field": "Microsoft.Compute/imageSKU",
                                        "like": "ol7*"
                                      },
                                      {
                                        "field": "Microsoft.Compute/imageSKU",
                                        "like": "ol8*"
                                      },
                                      {
                                        "field": "Microsoft.Compute/imageSKU",
                                        "like": "ol9*"
                                      },
                                      {
                                        "field": "Microsoft.Compute/imageSKU",
                                        "like": "ol9-lvm*"
                                      }
                                    ]
                                  }
                                ]
                              },
                              {
                                "allOf": [
                                  {
                                    "field": "Microsoft.Compute/imageOffer",
                                    "equals": "oracle-database"
                                  },
                                  {
                                    "field": "Microsoft.Compute/imageSKU",
                                    "equals": "oracle_db_21"
                                  }
                                ]
                              },
                              {
                                "allOf": [
                                  {
                                    "field": "Microsoft.Compute/imageOffer",
                                    "like": "oracle-database-*"
                                  },
                                  {
                                    "field": "Microsoft.Compute/imageSKU",
                                    "like": "18.*"
                                  }
                                ]
                              },
                              {
                                "allOf": [
                                  {
                                    "field": "Microsoft.Compute/imageOffer",
                                    "equals": "oracle-database-19-3"
                                  },
                                  {
                                    "field": "Microsoft.Compute/imageSKU",
                                    "equals": "oracle-database-19-0904"
                                  }
                                ]
                              }
                            ]
                          }
                        ]
                      },
                      {
                        "allOf": [
                          {
                            "field": "Microsoft.Compute/imagePublisher",
                            "equals": "microsoft-aks"
                          },
                          {
                            "field": "Microsoft.Compute/imageOffer",
                            "equals": "aks"
                          },
                          {
                            "field": "Microsoft.Compute/imageSKU",
                            "equals": "aks-engine-ubuntu-1804-202112"
                          }
                        ]
                      },
                      {
                        "allOf": [
                          {
                            "field": "Microsoft.Compute/imagePublisher",
                            "equals": "microsoft-dsvm"
                          },
                          {
                            "field": "Microsoft.Compute/imageOffer",
                            "equals": "aml-workstation"
                          },
                          {
                            "field": "Microsoft.Compute/imageSKU",
                            "in": [
                              "ubuntu-20",
                              "ubuntu-20-gen2"
                            ]
                          }
                        ]
                      },
                      {
                        "allOf": [
                          {
                            "field": "Microsoft.Compute/imagePublisher",
                            "equals": "Redhat"
                          },
                          {
                            "anyOf": [
                              {
                                "allOf": [
                                  {
                                    "field": "Microsoft.Compute/imageOffer",
                                    "equals": "RHEL"
                                  },
                                  {
                                    "anyOf": [
                                      {
                                        "field": "Microsoft.Compute/imageSKU",
                                        "like": "7*"
                                      },
                                      {
                                        "field": "Microsoft.Compute/imageSKU",
                                        "like": "8*"
                                      },
                                      {
                                        "field": "Microsoft.Compute/imageSKU",
                                        "like": "9*"
                                      }
                                    ]
                                  },
                                  {
                                    "field": "Microsoft.Compute/imageSKU",
                                    "notEquals": "74-gen2"
                                  }
                                ]
                              },
                              {
                                "allOf": [
                                  {
                                    "field": "Microsoft.Compute/imageOffer",
                                    "equals": "RHEL-RAW"
                                  },
                                  {
                                    "anyOf": [
                                      {
                                        "field": "Microsoft.Compute/imageSKU",
                                        "like": "7*"
                                      },
                                      {
                                        "field": "Microsoft.Compute/imageSKU",
                                        "like": "8*"
                                      },
                                      {
                                        "field": "Microsoft.Compute/imageSKU",
                                        "like": "9*"
                                      }
                                    ]
                                  }
                                ]
                              },
                              {
                                "allOf": [
                                  {
                                    "field": "Microsoft.Compute/imageOffer",
                                    "in": [
                                      "rhel-sap-ha"
                                    ]
                                  },
                                  {
                                    "anyOf": [
                                      {
                                        "field": "Microsoft.Compute/imageSKU",
                                        "equals": "90sapha-gen2"
                                      },
                                      {
                                        "field": "Microsoft.Compute/imageSKU",
                                        "like": "7*"
                                      },
                                      {
                                        "field": "Microsoft.Compute/imageSKU",
                                        "like": "8*"
                                      }
                                    ]
                                  },
                                  {
                                    "field": "Microsoft.Compute/imageSKU",
                                    "notEquals": "7.5"
                                  }
                                ]
                              },
                              {
                                "allOf": [
                                  {
                                    "field": "Microsoft.Compute/imageOffer",
                                    "in": [
                                      "rhel-sap-apps"
                                    ]
                                  },
                                  {
                                    "anyOf": [
                                      {
                                        "field": "Microsoft.Compute/imageSKU",
                                        "equals": "90sapha-gen2"
                                      },
                                      {
                                        "field": "Microsoft.Compute/imageSKU",
                                        "like": "7*"
                                      },
                                      {
                                        "field": "Microsoft.Compute/imageSKU",
                                        "like": "8*"
                                      }
                                    ]
                                  }
                                ]
                              },
                              {
                                "allOf": [
                                  {
                                    "field": "Microsoft.Compute/imageOffer",
                                    "like": "rhel-sap-*"
                                  },
                                  {
                                    "field": "Microsoft.Compute/imageSKU",
                                    "equals": "9_0"
                                  }
                                ]
                              },
                              {
                                "allOf": [
                                  {
                                    "field": "Microsoft.Compute/imageOffer",
                                    "equals": "rhel-ha"
                                  },
                                  {
                                    "field": "Microsoft.Compute/imageSKU",
                                    "like": "8*"
                                  },
                                  {
                                    "field": "Microsoft.Compute/imageSKU",
                                    "notIn": [
                                      "7.4",
                                      "7.5",
                                      "7.6",
                                      "8.1",
                                      "81_gen2"
                                    ]
                                  }
                                ]
                              },
                              {
                                "allOf": [
                                  {
                                    "field": "Microsoft.Compute/imageOffer",
                                    "equals": "rhel-sap"
                                  },
                                  {
                                    "field": "Microsoft.Compute/imageSKU",
                                    "notIn": [
                                      "7.4",
                                      "7.5",
                                      "7.7"
                                    ]
                                  },
                                  {
                                    "field": "Microsoft.Compute/imageSKU",
                                    "like": "7*"
                                  }
                                ]
                              }
                            ]
                          }
                        ]
                      },
                      {
                        "allOf": [
                          {
                            "field": "Microsoft.Compute/imagePublisher",
                            "equals": "OpenLogic"
                          },
                          {
                            "allOf": [
                              {
                                "anyOf": [
                                  {
                                    "allOf": [
                                      {
                                        "field": "Microsoft.Compute/imageOffer",
                                        "equals": "Centos"
                                      },
                                      {
                                        "field": "Microsoft.Compute/imageSKU",
                                        "like": "7*"
                                      },
                                      {
                                        "field": "Microsoft.Compute/imageSKU",
                                        "notLike": "8*"
                                      }
                                    ]
                                  },
                                  {
                                    "allOf": [
                                      {
                                        "field": "Microsoft.Compute/imageOffer",
                                        "equals": "centos-lvm"
                                      },
                                      {
                                        "field": "Microsoft.Compute/imageSKU",
                                        "in": [
                                          "7-lvm",
                                          "8-lvm",
                                          "7-lvm-gen2"
                                        ]
                                      }
                                    ]
                                  },
                                  {
                                    "allOf": [
                                      {
                                        "field": "Microsoft.Compute/imageOffer",
                                        "equals": "centos-ci"
                                      },
                                      {
                                        "field": "Microsoft.Compute/imageSKU",
                                        "equals": "7-ci"
                                      }
                                    ]
                                  }
                                ]
                              },
                              {
                                "field": "Microsoft.Compute/imageOffer",
                                "notEquals": "centos-hpc"
                              }
                            ]
                          }
                        ]
                      },
                      {
                        "allOf": [
                          {
                            "field": "Microsoft.Compute/imagePublisher",
                            "equals": "SUSE"
                          },
                          {
                            "anyOf": [
                              {
                                "allOf": [
                                  {
                                    "field": "Microsoft.Compute/imageOffer",
                                    "in": [
                                      "sles-12-sp5",
                                      "sles-15-sp2",
                                      "sle-hpc-15-sp4",
                                      "sles-15-sp1-sapcal",
                                      "sles-15-sp3-sapcal",
                                      "sles-15-sp4-basic",
                                      "sles-15-sp4"
                                    ]
                                  },
                                  {
                                    "field": "Microsoft.Compute/imageSKU",
                                    "in": [
                                      "gen1",
                                      "gen2"
                                    ]
                                  }
                                ]
                              },
                              {
                                "allOf": [
                                  {
                                    "field": "Microsoft.Compute/imageOffer",
                                    "in": [
                                      "sles",
                                      "sles-standard"
                                    ]
                                  },
                                  {
                                    "field": "Microsoft.Compute/imageSKU",
                                    "equals": "12-sp4-gen2"
                                  }
                                ]
                              },
                              {
                                "allOf": [
                                  {
                                    "field": "Microsoft.Compute/imageOffer",
                                    "in": [
                                      "sles-15-sp2-basic",
                                      "sles-15-sp2-hpc"
                                    ]
                                  },
                                  {
                                    "field": "Microsoft.Compute/imageSKU",
                                    "equals": "gen2"
                                  }
                                ]
                              },
                              {
                                "allOf": [
                                  {
                                    "field": "Microsoft.Compute/imageOffer",
                                    "equals": "sles-15-sp4-sapcal"
                                  },
                                  {
                                    "field": "Microsoft.Compute/imageSKU",
                                    "equals": "gen1"
                                  }
                                ]
                              },
                              {
                                "allOf": [
                                  {
                                    "field": "Microsoft.Compute/imageOffer",
                                    "in": [
                                      "sles-byos",
                                      "sles-sap"
                                    ]
                                  },
                                  {
                                    "field": "Microsoft.Compute/imageSKU",
                                    "in": [
                                      "12-sp4",
                                      "12-sp4-gen2"
                                    ]
                                  }
                                ]
                              },
                              {
                                "allOf": [
                                  {
                                    "field": "Microsoft.Compute/imageOffer",
                                    "equals": "sles-sap-byos"
                                  },
                                  {
                                    "field": "Microsoft.Compute/imageSKU",
                                    "in": [
                                      "12-sp4",
                                      "12-sp4-gen2",
                                      "gen2-12-sp4"
                                    ]
                                  }
                                ]
                              },
                              {
                                "allOf": [
                                  {
                                    "field": "Microsoft.Compute/imageOffer",
                                    "equals": "sles-sapcal"
                                  },
                                  {
                                    "field": "Microsoft.Compute/imageSKU",
                                    "equals": "12-sp3"
                                  }
                                ]
                              },
                              {
                                "allOf": [
                                  {
                                    "field": "Microsoft.Compute/imageSKU",
                                    "like": "gen*"
                                  },
                                  {
                                    "anyOf": [
                                      {
                                        "field": "Microsoft.Compute/imageOffer",
                                        "like": "opensuse-leap-15-*"
                                      },
                                      {
                                        "field": "Microsoft.Compute/imageOffer",
                                        "like": "sles-12-sp5-*"
                                      },
                                      {
                                        "field": "Microsoft.Compute/imageOffer",
                                        "like": "sles-sap-12-sp5*"
                                      },
                                      {
                                        "allOf": [
                                          {
                                            "field": "Microsoft.Compute/imageOffer",
                                            "like": "sles-sap-15-*"
                                          },
                                          {
                                            "field": "Microsoft.Compute/imageOffer",
                                            "notLike": "sles-sap-15-*-byos"
                                          }
                                        ]
                                      }
                                    ]
                                  }
                                ]
                              }
                            ]
                          }
                        ]
                      },
                      {
                        "allOf": [
                          {
                            "field": "Microsoft.Compute/imagePublisher",
                            "equals": "MicrosoftWindowsServer"
                          },
                          {
                            "anyOf": [
                              {
                                "field": "Microsoft.Compute/imageOffer",
                                "in": [
                                  "windowsserver",
                                  "windows-cvm",
                                  "windowsserverdotnet",
                                  "windowsserver-gen2preview",
                                  "windowsserversemiannual",
                                  "windowsserverupgrade"
                                ]
                              },
                              {
                                "allOf": [
                                  {
                                    "field": "Microsoft.Compute/imageOffer",
                                    "equals": "microsoftserveroperatingsystems-previews"
                                  },
                                  {
                                    "field": "Microsoft.Compute/imageSKU",
                                    "equals": "windows-server-vnext-azure-edition-core"
                                  }
                                ]
                              },
                              {
                                "allOf": [
                                  {
                                    "field": "Microsoft.Compute/imageOffer",
                                    "equals": "windowsserverhotpatch-previews"
                                  },
                                  {
                                    "field": "Microsoft.Compute/imageSKU",
                                    "equals": "windows-server-2022-azure-edition-hotpatch"
                                  }
                                ]
                              }
                            ]
                          }
                        ]
                      },
                      {
                        "allOf": [
                          {
                            "field": "Microsoft.Compute/imagePublisher",
                            "equals": "MicrosoftSQLServer"
                          },
                          {
                            "field": "Microsoft.Compute/imageOffer",
                            "notLike": "sql2019-sles*"
                          },
                          {
                            "field": "Microsoft.Compute/imageOffer",
                            "notIn": [
                              "sql2019-rhel7",
                              "sql2017-rhel7"
                            ]
                          }
                        ]
                      },
                      {
                        "allOf": [
                          {
                            "field": "Microsoft.Compute/imagePublisher",
                            "equals": "microsoftdynamicsax"
                          },
                          {
                            "field": "Microsoft.Compute/imageOffer",
                            "equals": "dynamics"
                          }
                        ]
                      },
                      {
                        "allOf": [
                          {
                            "field": "Microsoft.Compute/imagePublisher",
                            "equals": "microsoftazuresiterecovery"
                          },
                          {
                            "field": "Microsoft.Compute/imageOffer",
                            "equals": "process-server"
                          },
                          {
                            "field": "Microsoft.Compute/imageSKU",
                            "equals": "windows-2012-r2-datacenter"
                          }
                        ]
                      },
                      {
                        "allOf": [
                          {
                            "field": "Microsoft.Compute/imagePublisher",
                            "equals": "microsoftbiztalkserver"
                          },
                          {
                            "field": "Microsoft.Compute/imageOffer",
                            "equals": "biztalk-server"
                          }
                        ]
                      },
                      {
                        "field": "Microsoft.Compute/imagePublisher",
                        "equals": "microsoftpowerbi"
                      },
                      {
                        "allOf": [
                          {
                            "field": "Microsoft.Compute/imagePublisher",
                            "equals": "microsoftsharepoint"
                          },
                          {
                            "field": "Microsoft.Compute/imageOffer",
                            "equals": "microsoftsharepointserver"
                          }
                        ]
                      },
                      {
                        "allOf": [
                          {
                            "field": "Microsoft.Compute/imagePublisher",
                            "equals": "microsoftwindowsserverhpcpack"
                          },
                          {
                            "field": "Microsoft.Compute/imageOffer",
                            "equals": "windowsserverhpcpack"
                          }
                        ]
                      },
                      {
                        "allOf": [
                          {
                            "field": "Microsoft.Compute/imagePublisher",
                            "equals": "microsoftvisualstudio"
                          },
                          {
                            "field": "Microsoft.Compute/imageOffer",
                            "like": "visualstudio*"
                          },
                          {
                            "anyOf": [
                              {
                                "field": "Microsoft.Compute/imageSKU",
                                "like": "*-ws2012r2"
                              },
                              {
                                "field": "Microsoft.Compute/imageSKU",
                                "like": "*-ws2016"
                              },
                              {
                                "field": "Microsoft.Compute/imageSKU",
                                "like": "*-ws2019"
                              },
                              {
                                "field": "Microsoft.Compute/imageSKU",
                                "like": "*-ws2022"
                              }
                            ]
                          }
                        ]
                      }
                    ]
                  },
                  {
                    "field": "Microsoft.Compute/imagePublisher",
                    "notEquals": "microsoft-ads"
                  }
                ]
              }
            ]
          }
        ]
      },
      "then": {
        "effect": "[parameters('effect')]",
        "details": {
          "roleDefinitionIds": [
            "/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"
          ],
          "type": "Microsoft.Maintenance/configurationAssignments",
          "evaluationDelay": "AfterProvisioningSuccess",
          "existenceCondition": {
            "field": "Microsoft.Maintenance/configurationAssignments/maintenanceConfigurationId",
            "equals": "[parameters('maintenanceConfigurationResourceId')]"
          },
          "deployment": {
            "properties": {
              "mode": "incremental",
              "parameters": {
                "machineResourceId": {
                  "value": "[field('id')]"
                },
                "maintenanceConfigurationResourceId": {
                  "value": "[parameters('maintenanceConfigurationResourceId')]"
                },
                "osType": {
                  "value": "[if(equals(toLower(field('type')), 'microsoft.compute/virtualmachines'), field('Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType'), field('Microsoft.HybridCompute/machines/osName'))]"
                },
                "imagePublisher": {
                  "value": "[tolower(field('Microsoft.Compute/imagePublisher'))]"
                },
                "imageOffer": {
                  "value": "[tolower(field('Microsoft.Compute/imageOffer'))]"
                },
                "patchMode": {
                  "value": "[if(equals(toLower(field('type')), 'microsoft.compute/virtualmachines'), if(or(equals(toLower(field('Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType')), 'windows'), contains(createArray('microsoftwindowsserver', 'microsoftsqlserver', 'microsoftdynamicsax', 'microsoftazuresiterecovery', 'microsoftbiztalkserver', 'microsoftpowerbi', 'microsoftsharepoint', 'microsoftwindowsserverhpcpack', 'microsoftvisualstudio'),tolower(field('Microsoft.Compute/imagePublisher')))), field('Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration.patchSettings.patchMode'), field('Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration.patchSettings.patchMode')), 'NA')]"
                },
                "bypassCheckValue": {
                  "value": "[if(equals(toLower(field('type')), 'microsoft.compute/virtualmachines'), if(or(equals(toLower(field('Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType')), 'windows'), contains(createArray('microsoftwindowsserver', 'microsoftsqlserver', 'microsoftdynamicsax', 'microsoftazuresiterecovery', 'microsoftbiztalkserver', 'microsoftpowerbi', 'microsoftsharepoint', 'microsoftwindowsserverhpcpack', 'microsoftvisualstudio'), toLower(field('Microsoft.Compute/imagePublisher')))), if(contains(field('Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration.patchSettings.automaticByPlatformSettings'), 'bypassPlatformSafetyChecksOnUserSchedule'), field('Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration.patchSettings.automaticByPlatformSettings.bypassPlatformSafetyChecksOnUserSchedule'), bool('false')), if(contains(field('Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration.patchSettings.automaticByPlatformSettings'), 'bypassPlatformSafetyChecksOnUserSchedule'), field('Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration.patchSettings.automaticByPlatformSettings.bypassPlatformSafetyChecksOnUserSchedule'), bool('false'))), bool('false'))]"
                },
                "location": {
                  "value": "[field('location')]"
                }
              },
              "template": {
                "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
                "contentVersion": "1.0.0.0",
                "parameters": {
                  "machineResourceId": {
                    "type": "string"
                  },
                  "maintenanceConfigurationResourceId": {
                    "type": "String"
                  },
                  "osType": {
                    "type": "String"
                  },
                  "patchMode": {
                    "type": "string"
                  },
                  "imagePublisher": {
                    "type": "string"
                  },
                  "imageOffer": {
                    "type": "string"
                  },
                  "bypassCheckValue": {
                    "type": "bool"
                  },
                  "location": {
                    "type": "string"
                  }
                },
                "variables": {
                  "allowedWindowsPublishers": [
                    "microsoftwindowsserver",
                    "microsoftsqlserver",
                    "microsoftdynamicsax",
                    "microsoftazuresiterecovery",
                    "microsoftbiztalkserver",
                    "microsoftpowerbi",
                    "microsoftsharepoint",
                    "microsoftwindowsserverhpcpack",
                    "microsoftvisualstudio"
                  ],
                  "imagePublisher": "[parameters('imagePublisher')]",
                  "imageOffer": "[parameters('imageOffer')]",
                  "osTypeFromAllowedListOfPublishers": "[if(contains(variables('allowedWindowsPublishers'), variables('imagePublisher')), 'windows', 'linux')]",
                  "osTypeFromPublisher": "[if(equals(variables('imagePublisher'), 'microsoftsqlserver'), if(contains(variables('imageOffer'), 'ws'), 'windows', 'linux'), variables('osTypeFromAllowedListOfPublishers'))]",
                  "osType": "[toLower(if(empty(parameters('osType')), variables('osTypeFromPublisher'), parameters('osType')))]",
                  "automaticByPlatformPatchMode": "AutomaticByPlatform",
                  "configAssignmentName": "[concat(uniqueString(tolower(parameters('maintenanceConfigurationResourceId'))), '-AzPolicy')]",
                  "isAzureMachine": "[contains(tolower(parameters('machineResourceId')), tolower('/providers/microsoft.compute/virtualmachines/'))]",
                  "isArcMachine": "[contains(tolower(parameters('machineResourceId')), tolower('/providers/Microsoft.HybridCompute/machines/'))]",
                  "linuxOSProfile": {
                    "linuxConfiguration": {
                      "patchSettings": {
                        "patchMode": "[variables('automaticByPlatformPatchMode')]",
                        "automaticByPlatformSettings": {
                          "bypassPlatformSafetyChecksOnUserSchedule": true
                        }
                      }
                    }
                  },
                  "windowsOSProfile": {
                    "windowsConfiguration": {
                      "patchSettings": {
                        "patchMode": "[variables('automaticByPlatformPatchMode')]",
                        "automaticByPlatformSettings": {
                          "bypassPlatformSafetyChecksOnUserSchedule": true
                        }
                      }
                    }
                  },
                  "patchModeShouldBeChanged": "[and(variables('isAzureMachine'), or(not(equals(parameters('patchMode'), variables('automaticByPlatformPatchMode'))), not(equals(parameters('bypassCheckValue'), bool('true')))))]",
                  "machineName": "[last(split(parameters('machineResourceId'), '/'))]",
                  "updatedOSProfile": "[if(equals(variables('osType'), 'windows'), variables('windowsOSProfile'), variables('linuxOSProfile'))]"
                },
                "resources": [
                  {
                    "condition": "[variables('patchModeShouldBeChanged')]",
                    "type": "Microsoft.Compute/virtualMachines",
                    "apiVersion": "2023-09-01",
                    "name": "[variables('machineName')]",
                    "location": "[parameters('location')]",
                    "properties": {
                      "osProfile": "[variables('updatedOSProfile')]"
                    }
                  },
                  {
                    "type": "Microsoft.Compute/virtualMachines/providers/configurationAssignments",
                    "condition": "[variables('isAzureMachine')]",
                    "apiVersion": "2021-09-01-preview",
                    "name": "[concat(variables('machineName'), '/Microsoft.Maintenance/', variables('configAssignmentName'))]",
                    "location": "[parameters('location')]",
                    "properties": {
                      "maintenanceConfigurationId": "[parameters('maintenanceConfigurationResourceId')]"
                    },
                    "dependsOn": [
                      "[concat('Microsoft.Compute/virtualMachines/', variables('machineName'))]"
                    ]
                  },
                  {
                    "type": "Microsoft.HybridCompute/machines/providers/configurationAssignments",
                    "condition": "[variables('isArcMachine')]",
                    "apiVersion": "2021-09-01-preview",
                    "name": "[concat(variables('machineName'), '/Microsoft.Maintenance/', variables('configAssignmentName'))]",
                    "location": "[parameters('location')]",
                    "properties": {
                      "maintenanceConfigurationId": "[parameters('maintenanceConfigurationResourceId')]"
                    }
                  }
                ],
                "outputs": {
                  "OSProfile": {
                    "type": "object",
                    "value": "[variables('updatedOSProfile')]"
                  },
                  "configurationAssignmentName": {
                    "type": "string",
                    "value": "[variables('configAssignmentName')]"
                  }
                }
              }
            }
          }
        }
      }
    },
    "versions": [
      "3.12.0",
      "3.11.0",
      "3.10.0",
      "3.9.1"
    ]
  },
  "id": "/providers/Microsoft.Authorization/policyDefinitions/ba0df93e-e4ac-479a-aac2-134bbae39a1a",
  "name": "ba0df93e-e4ac-479a-aac2-134bbae39a1a"
}