azure-policy-reference

Type: decision

Decision

Policy exemptions resolve assignment IDs from a platform-generated reference.

Why

A hardcoded assignment ID silently breaks every exemption when the platform redeploys.

Violations

• Manually editing policy-assignment-reference.json.
• Exemption naming an assignment with a literal string instead of resolving it through the loaded reference.

Links

• azure-policy-naming-convention — The reference file is indexed by assignment name, so the name has to stay stable across redeployments.
• platform-test-environment — Test hierarchy requires its own reference file — without it, exemptions resolve the wrong assignment IDs.

← Back to knowledge graph