Azure / Azure/Azure-Landing-Zones

[Bug]: PolicySet Enforce-Guardrails-Network_20250326 wrong duplicate policy reference

Open
#4,100 1 comment 1 reaction 1 assignee Claimed by @Springstone View on GitHub
Status: Long Term :hourglass: Topic: Policy :pencil:
Dominant language
PowerShell
Stars
96
Forks
70
Avg merge
3d 1h
Merged PRs (30d)
7

Description

### Which product(s) are you raising for?

Other

### What versions of the tools are you using?

https://github.com/Azure/Enterprise-Scale/releases/tag/2026-03-18

### What is the bug?

https://github.com/Azure/Enterprise-Scale/blob/7a89056573572a1d11a7f7226cb6b8e9a38ff43c/src/resources/Microsoft.Authorization/policySetDefinitions/Enforce-Guardrails-Network_20250326.json#L267

```
{
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66",
"policyDefinitionReferenceId": "Deny-Waf-Fw-rules",
"definitionVersion": "2.*.*",
"groupNames": [],
"parameters": {
"effect": {
"value": "[[parameters('wafFwRules')]"
}
}
},
```

policyDefinitions with id 564feb30-bf6a-4854-b4bb-0d2d2d1e6c66 is duplicate in the policy set (the other is already assigned here https://github.com/Azure/Enterprise-Scale/blob/7a89056573572a1d11a7f7226cb6b8e9a38ff43c/src/resources/Microsoft.Authorization/policySetDefinitions/Enforce-Guardrails-Network_20250326.json#L320) and wrong here

### Log Output

```Text

```

### Screenshot(s)

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.