Deployment error if NetworkWatcherRG exists in a different region

Azure / Enterprise-Scale

The Azure Landing Zones (Enterprise-Scale) architecture provides prescriptive guidance coupled with Azure best practices, and it follows design principles across the critical design areas for organizations to define their Azure architecture

MIT License

1.65k stars 932 forks source link

If the NetworkWatcherRG exists in the subscription, but is configured for a different region then the following dine policies will fail:

policydefinitionesdeploynsg_flowlogs.json
policydefinitionesdeploynsgflowlogsto_la.json

Also repeated in the China cloud policy definitions, here and here.

Each uses a location parameter and ignores the existing location for the resource group if it exists elsewhere.

Therefore, if the resourcegroup exists, and its location does not match the region specified as the location parameter then the deployment will error.

Azure / Enterprise-Scale

Deployment error if NetworkWatcherRG exists in a different region #987