ansible.azure.automation/roles/azure_law/defaults/main.yml

---
#laws:
#  - name:
#    intelligence_packs:
#    location:
#    resource_group:
#    retention_in_days: -1
#    sku: unlimited
#    state:
#    tags:
#      "env": "prod"
#      "provisioner": "ansible"
...