Azure / Azure/Azure-Landing-Zones
duplicate Corp management group and assign same Corp's policy to the new management group - but not appear
- Dominant language
- PowerShell
- Stars
- 96
- Forks
- 70
- Avg merge
- 3d 1h
- Merged PRs (30d)
- 7
Description
I am trying to duplicate Corp management at the same level (include all policies assign to the Corp management group . I am able to deploy ALZ accelerator (e.g. Management Groups, Policy and Management Resources Only) and a new management group is created named as dataanalyticscanary. Below steps are done for my testing. Am i missing something or anything i need to follow
1. add a new management configuration to file "alz_custom.alz_architecture_definition.yaml"
- id: dataanalyticscanary
display_name: Data Analytics Canary
archetypes:
- dataanalyticscanary_custom
exists: false
parent_id: landingzonescanary
2. Create a new file "dataanalyticscanary_custom.alz_archetype_definition.yaml" and I tried to add a policy "Deny-Public-IP-On-NIC" as below content.
base_archetype: dataanalyticscanary
name: dataanalyticscanary_custom
policy_assignments_to_add: [Deny-Public-IP-On-NIC]
policy_assignments_to_remove: []
policy_definitions_to_add: []
policy_definitions_to_remove: []
policy_set_definitions_to_add: []
policy_set_definitions_to_remove: []
role_definitions_to_add: []
role_definitions_to_remove: []
Contributor guide
Research direction
Start with alz_custom.alz_architecture_definition.yaml and dataanalyticscanary_custom.alz_archetype_definition.yaml, then compare the dataanalyticscanary configuration with the existing Corp management group setup. Verify whether Deny-Public-IP-On-NIC is assigned to the new management group after deployment; done means the expected policy assignment appears there.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure
- Domain
- cloud, infrastructure
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100