azure-policy-rules-to-restrict-azure-locations.json

{
    "policyRule": {
      "if": {
        "allOf": [
          {
            "field": "location",
            "notIn": [ "eastus", "eastus2", "westus", "westus2" ]
          },
          {
            "field": "location",
            "notEquals": "global"
          },
          {
            "field": "type",
            "notEquals": "Microsoft.AzureActiveDirectory/b2cDirectories"
          }
        ]
      },
      "then": {
        "effect": "deny"
      }
    }
}