-
Notifications
You must be signed in to change notification settings - Fork 519
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Assign additional built-in Sovereign landing zone policy initiatives #718
Conversation
/azp run validateazcloud |
Azure Pipelines successfully started running 1 pipeline(s). |
/azp run validateazcloud |
Azure Pipelines successfully started running 1 pipeline(s). |
@jtracey93 Added in the logic to use the deployment().location and tested. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Some minor tweaks please @oZakari
Also tagging @vedagudipati @azure-lm @KevinRabun for a review before we merge
infra-as-code/bicep/modules/policy/assignments/alzDefaults/alzDefaultPolicyAssignments.bicep
Show resolved
Hide resolved
infra-as-code/bicep/modules/policy/assignments/alzDefaults/alzDefaultPolicyAssignments.bicep
Outdated
Show resolved
Hide resolved
infra-as-code/bicep/modules/policy/assignments/alzDefaults/alzDefaultPolicyAssignments.bicep
Outdated
Show resolved
Hide resolved
infra-as-code/bicep/modules/policy/assignments/alzDefaults/alzDefaultPolicyAssignments.bicep
Outdated
Show resolved
Hide resolved
infra-as-code/bicep/modules/policy/assignments/alzDefaults/alzDefaultPolicyAssignments.bicep
Outdated
Show resolved
Hide resolved
infra-as-code/bicep/modules/policy/assignments/alzDefaults/alzDefaultPolicyAssignments.bicep
Outdated
Show resolved
Hide resolved
infra-as-code/bicep/modules/policy/assignments/alzDefaults/alzDefaultPolicyAssignments.bicep
Outdated
Show resolved
Hide resolved
infra-as-code/bicep/modules/policy/assignments/alzDefaults/alzDefaultPolicyAssignments.bicep
Outdated
Show resolved
Hide resolved
infra-as-code/bicep/modules/policy/assignments/alzDefaults/alzDefaultPolicyAssignments.bicep
Outdated
Show resolved
Hide resolved
…DefaultPolicyAssignments.bicep Co-authored-by: Jack Tracey <41163455+jtracey93@users.noreply.github.com>
…DefaultPolicyAssignments.bicep Co-authored-by: Jack Tracey <41163455+jtracey93@users.noreply.github.com>
…DefaultPolicyAssignments.bicep Co-authored-by: Jack Tracey <41163455+jtracey93@users.noreply.github.com>
…DefaultPolicyAssignments.bicep Co-authored-by: Jack Tracey <41163455+jtracey93@users.noreply.github.com>
…DefaultPolicyAssignments.bicep Co-authored-by: Jack Tracey <41163455+jtracey93@users.noreply.github.com>
…DefaultPolicyAssignments.bicep Co-authored-by: Jack Tracey <41163455+jtracey93@users.noreply.github.com>
…DefaultPolicyAssignments.bicep Co-authored-by: Jack Tracey <41163455+jtracey93@users.noreply.github.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM.
Feel free to merge at end of day if nothing from @azure-lm, @KevinRabun or @vedagudipati 👍
Great work @oZakari
/azp run validateazcloud |
Azure Pipelines successfully started running 1 pipeline(s). |
Overview/Summary
AB#32559
Assign additional built-in Sovereign landing zone policy initiatives for the ALZ Default Policy Assignments Module.
This PR fixes/adds/changes/removes
[Preview]: Sovereignty Baseline - Global Policies - c1cbff38-87c0-4b9f-9f70-035c7a3b5523 (azadvertizer.net) to the Intermediate Root Management Group
[Preview]: Sovereignty Baseline - Confidential Policies - 03de05a4-c324-4ccd-882f-a814ea8ab9ea (azadvertizer.net) to the confidential-corp & confidential-online Management Groups, if deployed/exist
Breaking Changes
Testing Evidence
Tested deployment with
parLandingZoneMgConfidentialEnable
as well as with changing out specific params within the user defined types.Confidential Corp
Confidential Online
Int-Root
As part of this Pull Request I have
.bicep
file/s I am adding/editing are using the latest API version possiblemain
branch