Skip to content

Commit b88cc5f

Browse files
authored
fix: Update docs for disabling ddos in Bicep (#4061)
Update docs for ddos
1 parent 33ba058 commit b88cc5f

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

docs/content/bicep/howtos/modifyingPolicyAssignments.md

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -30,9 +30,12 @@ param parPolicyAssignmentParameterOverrides = {
3030

3131
## Disabling a Policy Assignment
3232

33-
To change the Enforcement mode of a policy assignment to DoNoteEnforce, but still assign the policy, add it to the `managementGroupDoNotEnforcePolicyAssignments` array:
33+
Let's say you want to disable the `Enable-DDoS-VNET` policy assignment. You can either set its enforcement mode to DoNotEnforce or exclude it entirely from deployment.
3434

35-
**platform/main.bicepparam:**
35+
To change the Enforcement mode of a policy assignment to DoNoteEnforce, but still assign the policy, add it to the `managementGroupDoNotEnforcePolicyAssignments` array in the corresponding management group's `.bicepparam` file:
36+
37+
**landingzones/main.bicepparam:**
38+
**platform/platform-connectivity/main.bicepparam:**
3639

3740
```bicep-params
3841
param platformConfig = {

0 commit comments

Comments
 (0)