Fixes deployment validation error when LAW is not deployed, and AMBA is enabled (#1820)

Co-authored-by: Jack Tracey <41163455+jtracey93@users.noreply.github.com>
This commit is contained in:
Arjen Huitema 2024-11-05 10:00:04 +01:00 коммит произвёл GitHub
Родитель 77496912e0
Коммит 7662460300
Не найден ключ, соответствующий данной подписи
Идентификатор ключа GPG: B5690EEEBB952194
2 изменённых файлов: 45 добавлений и 4 удалений

Просмотреть файл

@ -1,6 +1,7 @@
## In this Section
- [Updates](#updates)
- [November 2024](#november-2024)
- [🔃 Policy Refresh Q1 FY25](#-policy-refresh-q1-fy25)
- [October 2024](#october-2024)
- [September 2024](#september-2024)
@ -48,6 +49,12 @@ This article will be updated as and when changes are made to the above and anyth
Here's what's changed in Enterprise Scale/Azure Landing Zones:
### November 2024
#### Tooling
- A bug was resolved in the Portal Accelerator that caused deployment validation to fail with the error message "The 'location' property must be specified for 'amba-id-amba-prod-001'". This event happened when a Log Analytics Workspace was not deployed, but Azure Monitor Baseline Alerts were enabled. This issue occurred because Azure Monitor Baseline Alerts depend on the management subscription, which is not provided if the Log Analytics Workspace is not deployed. To address this scenario, an additional section was implemented in the Baseline alerts and monitoring tab allowing the selection of a Management subscription when not deploying a Log Analytics Workspace.
### 🔃 Policy Refresh Q1 FY25
- Updated ALZ custom policies enforcing minimum TLS versions to properly evaluate the minimum TLS version, ensuring services configured to deploy TLS 1.3 will successfully evaluate.

Просмотреть файл

@ -390,7 +390,6 @@
}
]
},
{
"name": "multiPlatformMgmtSub",
"type": "Microsoft.Common.InfoBox",
@ -1244,6 +1243,41 @@
],
"visible": "[equals(steps('monitor').enableMonitorBaselines,'Yes')]"
},
{
"name": "AmbaEsMgmtSubSection",
"type": "Microsoft.Common.Section",
"label": "Management subscription",
"elements": [
{
"name": "AmbaEsMgmtSubUniqueWarningAmba",
"type": "Microsoft.Common.InfoBox",
"visible": true,
"options": {
"text": "Ensure you select a subscription that is dedicated/unique for Management. Selecting the same Subscription here for Connectivity or Identity will result in a deployment failure. If you want to use a single Subscription for all platform resources, select 'Single' on the 'Azure Core Setup' blade.",
"uri": "https://learn.microsoft.com/azure/cloud-adoption-framework/ready/landing-zone/design-area/resource-org-subscriptions#organization-and-governance-design-considerations",
"style": "Warning"
}
},
{
"name": "AmbaEsMgmtSub",
"type": "Microsoft.Common.DropDown",
"label": "Management subscription",
"defaultValue": "[parse('[]')]",
"toolTip": "",
"multiselect": false,
"selectAll": false,
"filter": true,
"filterPlaceholder": "Filter subscriptions...",
"multiLine": true,
"visible": true,
"constraints": {
"allowedValues": "[steps('basics').getSubscriptions.data]",
"required": true
}
}
],
"visible": "[and(equals(steps('management').enableLogAnalytics, 'No'), equals(steps('monitor').enableMonitorBaselines,'Yes'), not(equals(steps('core').platformSubscription, 'Single')))]"
},
{
"name": "esAmbaAgConfig",
"type": "Microsoft.Common.Section",
@ -4453,7 +4487,7 @@
},
"visible": "[and(equals(steps('identity').esIdentityConnectivity, 'Yes'), not(equals(steps('connectivity').enableHub,'No')))]"
},
{
{
"name": "esIdentitySecondarySubSection",
"type": "Microsoft.Common.Section",
"label": "Secondary Region Identity",
@ -4498,7 +4532,7 @@
"visible": "[and(equals(steps('identity').esIdentitySecondarySubSection.esIdentityConnectivitySecondary, 'Yes'), not(equals(steps('connectivity').enableHub,'No')))]"
}
]
}
}
]
},
{
@ -9411,7 +9445,7 @@
"enableVmInsights": "[steps('management').enableVmInsights]",
"retentionInDays": "[string(steps('management').retentionInDays)]",
"enableSentinel": "[steps('management').enableSentinel]",
"managementSubscriptionId": "[steps('management').esMgmtSubSection.esMgmtSub]",
"managementSubscriptionId": "[if(and(equals(steps('management').enableLogAnalytics, 'No'), equals(steps('monitor').enableMonitorBaselines,'Yes'), not(equals(steps('core').platformSubscription, 'Single'))), steps('monitor').AmbaEsMgmtSubSection.AmbaEsMgmtSub, steps('management').esMgmtSubSection.esMgmtSub )]",
"enableAsc": "[steps('management').enableAsc]",
"emailContactAsc": "[steps('management').emailContactAsc]",
"enableAscForServers": "[steps('management').enableAscForServers]",