{
    "policyRule": {
        "if": {
            "allOf": [{
                    "field": "type",
                    "equals": "Microsoft.Network/publicIPAddresses"
                },
                {
                    "field": "Microsoft.Network/publicIPAddresses/publicIPAllocationMethod",
                    "match": "Dynamic"
                }
            ]
        },
        "then": {
            "effect": "deny"
        }
    }
}