azure-policy-reference

Type: decision

Decision

Policy exemptions source assignment IDs from the generated reference file.

Why

Assignment ARM IDs change when a policy is redeployed; a hardcoded ID silently breaks every exemption that references it.

Links

• azure-policy-naming-convention — Stable, predictable names are the keys the reference file is indexed by — they don't change when a policy is redeployed.
• platform-test-environment — The reference file must resolve against the correct management group hierarchy (test or prod) — a script determines which one the subscription belongs to

← Back to all decisions