Consistency Refinement

[jeremiahhoward]

Would this be possible?
Describe the bug
Assignment Default parameters are inconsistent with custom policy parameter default values. This presents a challenge in some CI/CD situations that rely on the definition of the configured source, rather than use of a custom assignment. As these policies are referenced widely, it will improve universal consistency to align these values.

Steps to reproduce

1. Review default values for listOfResourceTypesNotAllowed for https://github.com/Azure/Enterprise-Scale/blob/main/src/resources/Microsoft.Authorization/policySetDefinitions/Enforce-ALZ-Sandbox.json
2. Review the values contained in https://github.com/Azure/Enterprise-Scale/blob/main/eslzArm/managementGroupTemplates/policyAssignments/ENFORCE-ALZ-SandboxPolicyAssignment.json

[Springstone]

@jeremiahhoward thanks for reaching out.

For this issue, we have historically used the defaults from built-in policies being referenced in the initiative (policySet), which is an empty array. This helps us manage integration of built-in definitions over time, especially in the policy versioning world.

Technically, because this is a custom ALZ initiative, it would be possible to make the default values of the initiative match the assignment.

Is this issue causing you pain? What is the specific issue?

[jeremiahhoward]

Makes perfect sense, I think that rebuttal will be appropriate. Thank you, and please feel free to close the issue. Jeremiah Howard Pronouns: He, His, Him Senior Consultant Security Service Line Microsoft Industry Solutions Office: Home Phone: 425.538.8970 ***@***.******@***.***> 8 AM - 5 PM [Microsoft] 

…

________________________________