Description
The Policy Exemption Module has a dependency on a Policy Assignment to be there. Previously we did not have the remove module script apply to Policy Assignments, hence these policies were always there for the Exemption module. Now that we remove policy assignments by default, the exemption will not work as the Policy Assignment Resource ID does not exist.
Steps to reproduce
- Deploy a Policy Assignment with
removeModule set to true (default behavior)
- Deploy the Policy Exemption module.
Workaround
Should NOT be used going forward so that we align with other modules but tested it so that I can test the exemption pipeline.
- Deploy a Policy Assignment with
removeModule set to false (this will always be reverted when main branch runs)
- Deploy the Policy Exemption module.
Solution
- Create a Policy Assignment example in the dependency pipeline and deploy the dependency pipeline
- Modify the Policy Exemption Module to use that new policy assignment instead of the current one. By modifying the
policyAssignmentId
- Deploy the policy Exemption Module
Description
The Policy Exemption Module has a dependency on a Policy Assignment to be there. Previously we did not have the remove module script apply to Policy Assignments, hence these policies were always there for the Exemption module. Now that we remove policy assignments by default, the exemption will not work as the Policy Assignment Resource ID does not exist.
Steps to reproduce
removeModuleset totrue(default behavior)Workaround
Should NOT be used going forward so that we align with other modules but tested it so that I can test the exemption pipeline.
removeModuleset tofalse(this will always be reverted whenmainbranch runs)Solution
policyAssignmentId