Azure / ALZ-Bicep

This repository contains the Azure Landing Zones (ALZ) Bicep modules that help deliver and deploy the Azure Landing Zone conceptual architecture in a modular approach. https://aka.ms/alz/docs
MIT License
754 stars 506 forks source link

Option to create a landing zone management group for brownfield subscriptions #773

Open simonhutson opened 5 months ago

simonhutson commented 5 months ago

Describe the feature end to end, including deployment scenario details under which the feature would occur.

The following document describes an example approach that transitions an environment to the Azure landing zone conceptual architecture by duplicating the landing zone management group with policies in audit only mode. With this approach, you can quickly access the new desired target architecture and then assess the application or workload subscriptions for compliance. This approach eliminates the risk of affecting the application teams because the policies are in audit only mode.

https://learn.microsoft.com/azure/cloud-adoption-framework/ready/landing-zone/align-approach-duplicate-brownfield-audit-only

It would be useful to have an option to deploy a brownfield landing zone management group and policies as part of the standard Bicep deployment.

Why is this feature important. Describe why this would be important for your organization and others. Would this impact similar orgs in the same way?

Increasing numbers of customers have previously deployed Azure and are now looking to adopt infrastructure as code and ALZ best practices. A brownfield management group option would accelerate their migrations.

Please provide the correlation id associated with your error or bug.

xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Can you describe any alternatives that you have taken since this feature does not exist?

No response

Feature Implementation

No response

Check previous GitHub issues

Code of Conduct

oZakari commented 5 months ago

Hi @simonhutson, I agree that this is a valid ask. Probably not something we will get to in the near term, but will add to the backlog and consider our options.