azure_policy_insights_list_subscription_states_with_default_credential.py

1import os
2from azure.identity import DefaultAzureCredential
3from azure.mgmt.policyinsights import PolicyInsightsClient
4
5def run_example():
6    # Substitution of your subscription ID is required
7    subscription_id = os.environ.get("AZURE_SUBSCRIPTION_ID", "your-subscription-id")
8
9    # Authenticate using default Azure credentials
10    # Ensure you have AZURE_TENANT_ID, AZURE_CLIENT_ID, and AZURE_CLIENT_SECRET set as environment variables
11    credential = DefaultAzureCredential()
12
13    # Initialize the Policy Insights Client
14    client = PolicyInsightsClient(credential=credential, subscription_id=subscription_id)
15
16    # List policy states for the subscription
17    # This example queries the latest policy states at the subscription level
18    policy_states = client.policy_states.list_query_results_for_subscription(
19        policy_states_resource="latest",
20        subscription_id=subscription_id
21    )
22
23    print(f"Policy states for subscription {subscription_id}:")
24    for state in policy_states:
25        print(f"Resource ID: {state.resource_id}")
26        print(f"Policy Definition ID: {state.policy_definition_id}")
27        print(f"Compliance State: {state.compliance_state}")
28        print("-" * 30)
29
30if __name__ == "__main__":
31    run_example()