search

Azure / Enterprise-Scale

The Azure Landing Zones (Enterprise-Scale) architecture provides prescriptive guidance coupled with Azure best practices, and it follows design principles across the critical design areas for organizations to define their Azure architecture
https://aka.ms/alz
MIT License
1.73k stars 980 forks source link

Azure Landing Zone Accelerator Deployment Errors #1690

Closed FazzaLabs21 closed 4 months ago

FazzaLabs21 commented 4 months ago

Hi All, Im new to landing zones

When deploying the Azure landing zone accelerator from the custom template into a new blank Azure Tenant with just one subscription in it, I got a failed deployment with this main error: The resource write operation failed to complete successfully, because it reached terminal provisioning state 'Failed'. Click here for details

These are the deployments errors:

Landing zone Error: Apunipima-corpalz-DiagSettingsMGs-australiaeast-c87bc71a-6be0-5d The subscription '295b4246-f0ee-4c57-b287-433cec1384e3' is not registered to use microsoft.insights. (Code: Conflict)

Apunipima-landingzonesalz-DiagSettingsMGs-australiaeast-c87bc71a The subscription '295b4246-f0ee-4c57-b287-433cec1384e3' is not registered to use microsoft.insights. (Code: Conflict)

Apunipimaalz-DiagSettingsMGs-australiaeast-c87bc71a-6be0-5d1a-a5 The subscription '295b4246-f0ee-4c57-b287-433cec1384e3' is not registered to use microsoft.insights. (Code: Conflict)

Apunipima-sandboxesalz-DiagSettingsMGs-australiaeast-c87bc71a-6b The subscription '295b4246-f0ee-4c57-b287-433cec1384e3' is not registered to use microsoft.insights. (Code: Conflict)

Apunipima-onlinealz-DiagSettingsMGs-australiaeast-c87bc71a-6be0- The subscription '295b4246-f0ee-4c57-b287-433cec1384e3' is not registered to use microsoft.insights. (Code: Conflict)

Apunipima-decommissionedalz-DiagSettingsMGs-australiaeast-c87bc7 The subscription '295b4246-f0ee-4c57-b287-433cec1384e3' is not registered to use microsoft.insights. (Code: Conflict)

Apunipima-platformalz-DiagSettingsMGs-australiaeast-c87bc71a-6be The subscription '295b4246-f0ee-4c57-b287-433cec1384e3' is not registered to use microsoft.insights. (Code: Conflict)

alz-KvGuardrailsPlat-australiaeast-c87bc71a-6be0-5d1a-a585-233fa The policy definition specified in policy assignment 'Enforce-GR-KeyVault' is out of scope. Policy definitions should be specified only at or above the policy assignment scope. If the management groups hierarchy changed recently or if assigning a management group policy to new subscription, please allow up to 30 minutes for the hierarchy changes to apply and try again. (Code: InvalidCreatePolicyAssignmentRequest)

alz-MonitorPolicyLite-australiaeast-c87bc71a-6be0-5d1a-a585-233f The resource write operation failed to complete successfully, because it reached terminal provisioning state 'Failed'. (Code: ResourceDeploymentFailure) At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/arm-deployment-operations for usage details. (Code: DeploymentFailed), { "error": { "code": "InvalidCreatePolicyAssignmentRequest", "message": "The policy definition specified in policy assignment 'Deploy-AMBA-Connectivity' is out of scope. Policy definitions should be specified only at or above the policy assignment scope. If the management groups hierarchy changed recently or if assigning a management group policy to new subscription, please allow up to 30 minutes for the hierarchy changes to apply and try again." } } (Code: BadRequest)

Im deploying into AUS East.

Any Ideas, I can provide more information if required. What are the main isuess here, if i can fix them, how do i redeploy the template without creating Conflicts

image

Springstone commented 4 months ago

@FazzaLabs21 thanks for opening the issue. You can ignore the issues referring to "30 minutes" as this is an ARM error relating to policy deployment failures and should go away when we resolve the other issue. The first issue is most likely because the resource provider isn't registered on the subscription. Can you please confirm that it is registered:

image

FazzaLabs21 commented 4 months ago

Hi @Springstone. Thanks for coming back to me.

Microsoft Insights was allready registered image

I have just enabled all Insights related resource providers. image

Springstone commented 4 months ago

@FazzaLabs21 have you tried deploying again, is it working now? Or are you still getting the same error?

FazzaLabs21 commented 4 months ago

Hi Springstone i deployed again and it worked. Should of tried that before opening a bug ticket, but im new to this. Many Thanks.