Scenario: approved VM sizes
Use Audit first for visibility, then Deny to enforce approved SKUs. Restrict Virtual Machine (VM) sizes by Stock Keeping Unit (SKU). Deny blocks non-approved create/update. Start with Audit to measure impact. Policy behavior depends on effect.