Performing Policy Scope while following Azure Managment Group best practices

[mrwalters1988]

All,
I'm curious how to apply policies using a Dev/Test/Prod environment scope when following the Azure CAF recommended architecture of explicitly NOT defining a management group for landing zone sub-environments. Specifically, documented here:

Don't create management groups for production, testing, and development environments. If necessary, separate these groups into different subscriptions in the same management group.

The best way that I've currently thought of is to make use of notscopes and wildcards to exclude subscriptions matching a nonprod naming convention, however the scope requires a subscriptionID, not a subscription name, so I'm at a loss for how this would be implemented.