Keeping up with new policies manually

[arrerezai]

Hi,

After participating in the ALZ community call just now, I realized there are multiple new policies I would like to explore and eventually drag in to our current solution. However, while ensuring my fork is up-to-date with this repo, running "Sync-ALZPolicies -DefinitionsRootFolder .\Definitions -CloudEnvironment AzureCloud" brings in a lot of new policyDefinitions, but no policySetDefinitions. Running the Build-DeploymentPlans script then leads to an error indicating it cannot find the new policySets (in my case it fails on Audit-TrustedLaunch.jsonAudit-TrustedLaunch.json not being found). Do I need to sync in the policySets in some other way or is something wrong with the Sync-ALZPolicies command?

Epac v10.3.2

[arrerezai]

@anwather, seems you were highly involved in closed issues in regards of this in the past. Any advise?

[anwather]

@arrerezai I've just run a sync and I have 181 policy definitions and 79 policy set definitions. The command was updated in 10.3.1 (I think) to cover the new initiatives file created by the ALZ team.

[arrerezai]

I literally just synced my EpacForkRepo and received the changes in Epac v10.3.3. Then I ran a git pull locally and from there, I did the following:

As per the image, the ALZ folder is created underneath the policySetDefinitions folder, but it shows up as empty. Hence, the sync is not working - at least not for me. Any suggestions on how I could proceed?

[anwather]

Are you using the PowerShell module or local scripts? Get Outlook for Android<https://aka.ms/AAb9ysg>

…

________________________________ From: Arash Rezai ***@***.***> Sent: Thursday, June 13, 2024 6:26:45 PM To: Azure/enterprise-azure-policy-as-code ***@***.***> Cc: Anthony Watherston ***@***.***>; Mention ***@***.***> Subject: Re: [Azure/enterprise-azure-policy-as-code] Keeping up with new policies manually (Discussion #667) I literally just synced my EpacForkRepo and received the changes in Epac v10.3.3. Then I ran a git pull locally and from there, I did the following: image.png (view on web)<https://github.com/Azure/enterprise-azure-policy-as-code/assets/157028889/c9a32627-b42f-4b34-91f6-634d85915a3c> As per the image, the ALZ folder is created underneath the policySetDefinitions folder, but it shows up as empty. Hence, the sync is not working - at least not for me. Any suggestions on how I could proceed? — Reply to this email directly, view it on GitHub<#667 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/ACWCJVT4FM6K275H6P5UU33ZHFJULAVCNFSM6AAAAABJF4XA7SVHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4TONRQGYZDC>. You are receiving this because you were mentioned.Message ID: ***@***.***>

[anwather]

@arrerezai can you message me on Teams at [email protected] please and we can set up a debugging session

[arrerezai]

Solved by running an update of the module to pull in the latest v10.3.3 and then running the Sync-ALZPolicies command.

Upgrade-Module EnterprisePolicyAsCode -Force
Sync-ALZPolicies -DefinitionsRootFolder .\Definitions -CloudEnvironment AzureCloud

[LarsVidingSE]

Isn't the right command "Update-Module EnterprisePolicyAsCode -Force"

[arrerezai]

Of course it is, not sure why I typed Upgrade - well watched! ;)