title: Azure Policy enforce only for new resources
body: <p>I am creating an Azure policy to enforce some naming conventions. I want to enforce this policy only for any new resources being created.  I am planning to use <code>Deny</code> as an <code>Effect</code>.</p>
  <p>Will the <code>Deny</code> effect block the existing resources being re-provisioned?</p>
  <p>Is there any way to implement this without impacting the re-provisioning of old resources?  As per the document <a href="https://docs.microsoft.com/en-us/azure/governance/policy/concepts/effects#deny" rel="nofollow noreferrer">here</a>, it says updating will be prohibited.</p>