Support for flexible Policy enforcement during assignment

[bhummerstone]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

When assigning a policy in the Portal, you can enable/disable the Enforcement Mode; this is useful for using the same Policy definition (with a built-in Deny) but disabling enforcement in Non-Production environments.

New or Affected Resource(s)

• azurerm_policy_assignment

Potential Terraform Configuration

resource "azurerm_policy_assignment" "example" {
  name                 = "example-policy-assignment"
  scope                = "${azurerm_resource_group.example.id}"
  policy_definition_id = "${azurerm_policy_definition.example.id}"
  description          = "Policy Assignment created via an Acceptance Test"
  display_name         = "My Example Policy Assignment"
  enforcement_mode = "disabled"

  parameters = <<PARAMETERS
{
  "allowedLocations": {
    "value": [ "West Europe" ]
  }
}
PARAMETERS
}

References

None

[ccampo]

I have created a pull request that addresses this issue. Feedback welcome

#7331

[bhummerstone]

Perfect! Thank you :)

[ArcturusZhang]

Should be resolved in #7331 , closing....

[ghost]

This has been released in version 2.15.0 of the provider. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading. As an example:

provider "azurerm" {
    version = "~> 2.15.0"
}
# ... other configuration ...

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. If you feel I made an error 🤖 🙉 , please reach out to my human friends 👉 hashibot-feedback@hashicorp.com. Thanks!