Forum Discussion

Aniruddha1248's avatar
Aniruddha1248
Icon for Microsoft rankMicrosoft
Nov 02, 2023

Policy trigger for Microsoft.Network/virtualNetworks/subnets/join/action

Hello Team,   I have a use case where I do not want any resource to connect to my VNET except a few allowed ones. We are designing a secured containerized environment for our customers with ver...
azure policy
  • Aniruddha1248's avatar
    Aniruddha1248
    Icon for Microsoft rankMicrosoft
    Dec 05, 2023

    Kidd_Ip 

    Policy assignments are a problem as policies are effectual at the scope they are assigned.

    We don't want to put an assignment at a very broad scope as subscription but want to restrict it only to our resource group that we create. And the issue we are seeing is that resources from other resource group are still able to do vnet join as they do not have these policy assignments.

     

Resources