Deploying Recovery Vault and setting tags for AzureBackupRG which is automatically created

[elmerguevara]

Hi, we are currently running into an issue when deploying Recovery Vaults(RSVs). We can successfully deploy RSVs via Bicep with its identity, private endpoint and backup policies. The issue we have is that a RSV will automatically create a resource group to house snapshots, unfortunately it seems the properties of this resource group cannot be controlled at deployment time, as a result, our policy blocks the creation of this resource group. (Tagging Policy sent to deny, without required tags deployment will fail). This causes backups to fail since there is no resource group to store the snapshots. As a result, we have to turn off our tagging policy, reset the backup and the resource group gets created (without tags) and the backup successfully starts. Has anyone ran into this issue before, turning off our tagging policy works for now but isnt very scalable.
The closest thing I found to being able to control the resource group created is under the properties for: '
Microsoft.RecoveryServices/vaults/backupPolicies@2021-03-01

instantRPDetails: { azureBackupRGNamePrefix: azureBackupRGNameSuffix: }

Seems you can control the name but not really the 'resource group'. Ideally I would like to control the name and tags for this resource group. Has anyone ran into this?

https://azure.microsoft.com/en-us/updates/azurebackuprg/

It also seems the docs are perhaps not up to date and do not show the instantRPDetails property:
https://docs.microsoft.com/en-us/azure/templates/microsoft.recoveryservices/vaults/backuppolicies?tabs=json#Settings

I am using 2021-03-01 for the bicep module.

Thank you!

[alex-frankel]

Unfortunately, there is not much from the bicep side that we can do. This is a result of the RSV resource provider. I'd recommend opening a support case to triage the request so the team is aware of it. Considering they have this azureBackupRGNamePrefix property, they are likely aware of the problem, but they have may more info to share.

[elmerguevara]

Thank you! I opened up a ticket with support.