Virtual Machine uses an organization-approved SKU size

# Enforce allowed VM SKUs via Azure Policy
resource "azurerm_policy_assignment" "<example_resource_name>" {
  name                 = "<example_resource_name>"
  scope                = "/subscriptions/<example_resource_id>"
  policy_definition_id = "/providers/Microsoft.Authorization/policyDefinitions/<example_resource_id>"

  parameters = jsonencode({
    listOfAllowedSKUs = { value = ["<desired-sku-1>", "<desired-sku-2>"] } # CRITICAL: only these SKUs are allowed
  })
}

// Resize VM to an approved SKU
resource vm 'Microsoft.Compute/virtualMachines@2023-09-01' = {
  name: '<example_resource_name>'
  location: '<example_location>'
  properties: {
    hardwareProfile: {
      vmSize: '<desired-sku-1>' // CRITICAL: sets VM to an approved size so the check passes
    }
  }
}