Azure / terraform-azurerm-caf-enterprise-scale

Azure landing zones Terraform module
https://aka.ms/alz/tf
MIT License
793 stars 514 forks source link

Bug Report: Policy Sets not found in Azure Government #980

Closed dsimpson-evotek closed 1 week ago

dsimpson-evotek commented 1 month ago

Community Note

Versions

terraform: 1.8.5

azure provider: 3.107.0

module: terraform-azurerm-caf-enterprise-scale

Description

When running a Terraform plan in Azure Government, we get the following error: Error: reading Policy Set Definition "e20d08C5-6d64-656d-6465-ce937fdBebc": policy.SetDefinitionsClient#Get: Failure responding to request: StatusCode=404 -- Original Error: autorest/azure: Service returned an error. Status=404 Code="PolicySetDefinitionNotFound™ Message="The policy set definition 'e20d08c5-6d64-656d-6465-ce9e37fdbebc' could not be found.

Describe the bug

Trying to follow CAF docs for a basic CAF implementation in Azure Government.

Steps to Reproduce

  1. Clone CAF
  2. Set location to US Gov Virginia
  3. Follow level 100 example from documentation

Screenshots

Additional context

matt-FFFFFF commented 1 month ago

Hi!

This is unfortunately the case sometimes. We can't test the module in usgov as most of the team are based in EMEA.

In order to fix this you'll have to exclude the policy definition and any related assignments from the archetype.

@springstone do you know if there are any plans to put the latest policies into gov?

matt-FFFFFF commented 1 month ago

The standard way to do this is to exclude the policies as you encounter them - use the exclusions process documented in the wiki

microsoft-github-policy-service[bot] commented 2 weeks ago

This issue has been automatically marked as stale because it has been marked as requiring author feedback but has not had any activity for 7 days. It will be closed if no further activity occurs within 7 days of this comment.