Updated known issues list of resource types excluded from policy eval #1306
Conversation
shanhix1
requested review from
robga,
cemheren,
gokmen-msft and
calecarter
as code owners
| - Microsoft.Resources/*, except resource groups and subscriptions. | ||
| - For example, `Microsoft.Resources/deployments` and `Microsoft.Resources/templateSpecs` are not evaluated by policy. | ||
| - Microsoft.Billing/* | ||
| - Microsoft.Capacity/reservationOrders/* | ||
| - Microsoft.Help/* | ||
| - Microsoft.Diagnostics/* | ||
|
|
||
| The following resource types are also excluded from policy evaluation: | ||
| - Microsoft.Automation/automationAccounts/jobs |
There was a problem hiding this comment.
these are excluded only from brownfield evaluation, not greenfield - so maybe should be moved to the section below - though I'm not sure if they're all due to scalability issues, or due to not following the RPC (not supporting list calls at subscription level for example)
There was a problem hiding this comment.
@varunkumta are you talking about Microsoft.Automation/automationAccounts/jobs only, or all the resource types in this new list?
| @@ -228,13 +228,31 @@ All Databricks resources bypass policy enforcement at creation time. Databricks | |||
|
|
|||
| ### Resources that are exempt from policy evaluation | |||
There was a problem hiding this comment.
should also add a section about types that are marked 'internal' in operations api - eg microsoft.devtestlab/schedules
There was a problem hiding this comment.
@varunkumta - can you point me to where I can find these?
|
Adding |
Updated known issues list of resource types excluded from policy evaluation