Azure / terraform-azurerm-caf-enterprise-scale

Azure landing zones Terraform module
https://aka.ms/alz/tf
MIT License
855 stars 562 forks source link

Bug Report: Policy Sets not found in Azure Government #980

Closed dsimpson-evotek closed 3 months ago

dsimpson-evotek commented 4 months ago

Community Note

Versions

terraform: 1.8.5

azure provider: 3.107.0

module: terraform-azurerm-caf-enterprise-scale

Description

When running a Terraform plan in Azure Government, we get the following error: Error: reading Policy Set Definition "e20d08C5-6d64-656d-6465-ce937fdBebc": policy.SetDefinitionsClient#Get: Failure responding to request: StatusCode=404 -- Original Error: autorest/azure: Service returned an error. Status=404 Code="PolicySetDefinitionNotFound™ Message="The policy set definition 'e20d08c5-6d64-656d-6465-ce9e37fdbebc' could not be found.

Describe the bug

Trying to follow CAF docs for a basic CAF implementation in Azure Government.

Steps to Reproduce

  1. Clone CAF
  2. Set location to US Gov Virginia
  3. Follow level 100 example from documentation

Screenshots

Additional context

matt-FFFFFF commented 4 months ago

Hi!

This is unfortunately the case sometimes. We can't test the module in usgov as most of the team are based in EMEA.

In order to fix this you'll have to exclude the policy definition and any related assignments from the archetype.

@springstone do you know if there are any plans to put the latest policies into gov?

matt-FFFFFF commented 4 months ago

The standard way to do this is to exclude the policies as you encounter them - use the exclusions process documented in the wiki

microsoft-github-policy-service[bot] commented 3 months ago

This issue has been automatically marked as stale because it has been marked as requiring author feedback but has not had any activity for 7 days. It will be closed if no further activity occurs within 7 days of this comment.