ansible.azure.automation/roles/azure_sentinel/defaults/main.yml

---
subscriptionid:
#sentinels:
#  - law:
#      name:
#      subscriptionid:
#    resource_group:
#    state:
#    tag: "env=prod"
...