PolicyViolation policy config_error ai_generated true

资源'myresource'被策略禁止。策略：'允许的位置'。原因：'资源位置'eastus2'不被允许。'

Resource 'myresource' was disallowed by policy. Policy: 'Allowed locations'. Reason: 'The resource location 'eastus2' is not permitted.'

ID: policy/azure-policy-denies-resource-group-location-mismatch

其他格式: JSON · Markdown 中文 · English
80%修复率
85%置信度
1证据数
2023-01-15首次发现

版本兼容性

版本状态引入弃用备注
Azure Policy 2.0 active — — —
Azure Resource Manager 2023-03-01 active — — —

根因分析

Azure策略'允许的位置'将资源部署限制在预定义的区域列表中，而资源的位置与任何允许的区域都不匹配。

English

Azure Policy 'Allowed locations' restricts resource deployment to a predefined list of regions, and the resource's location does not match any allowed region.

generic

官方文档

https://learn.microsoft.com/en-us/azure/governance/policy/concepts/effects

解决方案

  1. Identify the allowed locations from the policy assignment and redeploy the resource to one of those regions. Use Azure CLI: `az policy assignment list --query "[?policyDefinitionId=='/providers/Microsoft.Authorization/policyDefinitions/e56962a6-4747-49cd-b67b-bf8b01975c4c'].{name:name, parameters:parameters}"` to get the allowed list.
  2. Create an exemption for the resource group or specific resource via Azure Portal: Policy > Compliance > Select policy > Create exemption. This bypasses the policy for that scope.
  3. Modify the policy assignment to include the desired location by updating the parameters: `az policy assignment update --name "allowed-locations" --resource-group "my-rg" --parameters "{\"listOfAllowedLocations\":{\"value\":[\"eastus\",\"eastus2\"]}}"`.

无效尝试

常见但无效的做法:

  1. 60% 失败

    The policy may apply to multiple resource groups or subscriptions; changing location randomly may still violate the policy if the new location is also not allowed.

  2. 80% 失败

    The policy is evaluated at deployment time; recreating in the same disallowed location will trigger the same denial.

  3. 95% 失败

    The policy is enforced by Azure Resource Manager; retrying without changing the location will consistently fail.