Skip to content

ALZ Sync - not able to add "Deny-Subnet-Without-Penp" and "Deny-Subnet-Without-Udr" with Sync-ALZPolicyFromLibrary #1230

@johanandrelundar

Description

@johanandrelundar

Describe the bug

I am running the Sync-ALZPolicyFromLibrary -DefinitionsRootFolder .\Definitions -Type ALZ -PacEnvironmentSelector "epac-test" -EnableOverride command to sync with ALZ with our customized landing zones. Ability to customize landingzones in EPAC 11 has been a massive improvement for us so thanks for adding support for this 🎉

This works great, but unfortunately not when trying to add two specific policies to a custom landing zone, namely:

Deny-Subnet-Without-Penp
Deny-Subnet-Without-Udr

I have been really scratching my head as I do not know why this is happening. Trying another similar policy works (Deny-Subnet-Without-Nsg)

It have tried on both custom landing zones and also on the built in ones such as Landing Zones and they still don't work.

The sync output reports the following:

Image

To Reproduce

Customize a landing zone such as this and run the ALZ-Sync with the override command:

"overrides":{
"archetypes": {
"custom": [
{
"name": "connected",
"type": "existing",
"based_on": "corp",
"policy_assignments_to_add": [
"Deny-Subnet-Without-Penp", // <- This does NOT work
"Deny-Subnet-Without-Udr", // <- This does NOT work
"Deny-Subnet-Without-Nsg" // <- This works
],
"policy_assignments_to_remove": [
"Deny-Public-Endpoints"
]
}
],
"ignore": [
"corp"
]
}
}

Expected behavior

"Deny-Subnet-Without-Penp" and "Deny-Subnet-Without-Udr" should be synced as all other policyes and added to the correct landing zone when running the sync.

EPAC Version
11.2.2

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions