-
Notifications
You must be signed in to change notification settings - Fork 71
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Prevent remediation when assignment_enforcement_mode=false #72
Conversation
Hi @pmatthews05, thank you for raising this, great spot about preventing remediation when Could you kindly update your branch with the changes made in #73, have finally caved into running |
Gettek main
@gettek I see you have added some tags and assigned to me. Is there anything else you require for me to do? |
@pmatthews05 looking forward to merge this but made a few comments above if you wouldn't mind resolving first please? |
@gettek are the comments you referring to the following?
If so, I have updated my code with the changes made in #73, and removed format-terraform.ps1. You should se the 5 commits I made after that comment to complete what you requested. If it's something else, please let me know. |
@pmatthews05 if you scroll through the file changes (or above) I have made a few more comments for minor changes 🙂 |
@gettek I'm sorry, I've looked at file changes and there are no comments from you for minor changes. Do you mind re-listing them in a comment back to me please? |
@pmatthews05 apologies, forgot to hit the submit review button! |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks @pmatthews05 - Please fix the final comment and run precommit to update the readme's back to the old tf versioning
Description
assignment_enforcement_mode
is set to false, it shouldn't apply a remediation. An extra condition to check for this assignment_enforcement_mode.azurerm_policy_set_definition
change calls to lookup from name, as Microsoft changes display names, update examples, and readme files.data.azurerm_policy_definition
todata.azurerm_policy_definition_built_in
and using the name instead of the display name. Updated examples and readme files.>=3.44.0
in examples and readme files, becausedata.azurerm_policy_definition_built_in
is only available from that version onwards.Fixes # (issue)
Type of change
Test Configuration:
Checklist: