-
Notifications
You must be signed in to change notification settings - Fork 319
Description
Describe the bug
I am running the Sync-ALZPolicyFromLibrary -DefinitionsRootFolder .\Definitions -Type ALZ -PacEnvironmentSelector "epac-test" -EnableOverride command to sync with ALZ with our customized landing zones. Ability to customize landingzones in EPAC 11 has been a massive improvement for us so thanks for adding support for this 🎉
This works great, but unfortunately not when trying to add two specific policies to a custom landing zone, namely:
Deny-Subnet-Without-Penp
Deny-Subnet-Without-Udr
I have been really scratching my head as I do not know why this is happening. Trying another similar policy works (Deny-Subnet-Without-Nsg)
It have tried on both custom landing zones and also on the built in ones such as Landing Zones and they still don't work.
The sync output reports the following:
To Reproduce
Customize a landing zone such as this and run the ALZ-Sync with the override command:
"overrides":{
"archetypes": {
"custom": [
{
"name": "connected",
"type": "existing",
"based_on": "corp",
"policy_assignments_to_add": [
"Deny-Subnet-Without-Penp", // <- This does NOT work
"Deny-Subnet-Without-Udr", // <- This does NOT work
"Deny-Subnet-Without-Nsg" // <- This works
],
"policy_assignments_to_remove": [
"Deny-Public-Endpoints"
]
}
],
"ignore": [
"corp"
]
}
}
Expected behavior
"Deny-Subnet-Without-Penp" and "Deny-Subnet-Without-Udr" should be synced as all other policyes and added to the correct landing zone when running the sync.
EPAC Version
11.2.2