azure-policy icon indicating copy to clipboard operation
azure-policy copied to clipboard

Alias request: Microsoft.Network/virtualNetworks/subnets[*].serviceEndpoints[*]

Open F-r-a-n-k-D opened this issue 3 years ago • 3 comments

Details of the scenario you tried and the problem that is occurring

Deny the creation of serviceEndpoints in all scenario's: Creation from virtual network/settings/subnets/ Creation from virtual network/settings/service endpoints

Suggested solution to the issue

Register an alias to support using Microsoft.Network/virtualNetworks/subnets[].serviceEndpoints[] in a policy as follows:

"if": { "allOf": [ { "field": "type", "equals": "Microsoft.Network/virtualNetworks" }, { "count": { "field": "Microsoft.Network/virtualNetworks/subnets[].serviceEndpoints[]" }, "greaterOrEquals": 1 } ] }

F-r-a-n-k-D avatar Jan 20 '22 16:01 F-r-a-n-k-D

@F-r-a-n-k-D , these are the aliases exposed today: Microsoft.Network/virtualNetworks/subnets[].serviceEndpoints[].locations[]
Microsoft.Network/virtualNetworks/subnets[
].serviceEndpoints[*].service

kenieva avatar Feb 09 '22 18:02 kenieva

Thank you! How long does it take for these new aliases to be available in region West-Europe?

F-r-a-n-k-D avatar Feb 10 '22 15:02 F-r-a-n-k-D

Those should be available in West-Europe...

kenieva avatar Feb 10 '22 19:02 kenieva