You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/key-vault/general/keyvault-moveresourcegroup.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -22,19 +22,19 @@ Moving a key vault across resource groups is a supported key vault feature. Movi
22
22
23
23
## Design Considerations
24
24
25
-
Your organization may have implemented Azure Policy with enforcement or exclusions at the resource group level. There may be a different set of policy assignments in the resource group where your key vault currently exists and the resource group where you are moving your key vault. This has the potential to break your applications.
25
+
Your organization may have implemented Azure Policy with enforcement or exclusions at the resource group level. There may be a different set of policy assignments in the resource group where your key vault currently exists and the resource group where you are moving your key vault. A conflict in policy requirements has the potential to break your applications.
26
26
27
27
### Example
28
28
29
-
You have an application connected to key vault that creates certificates that are valid for 2 years. The resource group where you are attempting to move your key vault has a policy assignment that blocks the creation of certificates that are valid for longer than 1 year. After moving your key vault to the new resource group the operation to create a certificate that is valid for 2 years will be blocked by an Azure policy assignment.
29
+
You have an application connected to key vault that creates certificates that are valid for two years. The resource group where you are attempting to move your key vault has a policy assignment that blocks the creation of certificates that are valid for longer than one year. After moving your key vault to the new resource group the operation to create a certificate that is valid for two years will be blocked by an Azure policy assignment.
30
30
31
31
### Solution
32
32
33
33
Make sure that you go to the Azure Policy page on the Azure portal and look at the policy assignments for your current resource group as well as the resource group you are moving to and ensure that there are no mismatches.
34
34
35
35
## Procedure
36
36
37
-
1. Log in to the Azure Portal
37
+
1. Log in to the Azure portal
38
38
2. Navigate to your key vault
39
39
3. Click on the "Overview" tab
40
40
4. Select the "Move" button
@@ -43,4 +43,4 @@ Make sure that you go to the Azure Policy page on the Azure portal and look at t
43
43
7. Acknowledge the warning regarding moving resources
44
44
8. Select "OK"
45
45
46
-
Key Vault will now evaluate the validity of the resource move, and alert you if there are any errors. If there are no errors, the resource move will be completed.
46
+
Key Vault will now evaluate the validity of the resource move, and alert you of any errors. If no errors are found, the resource move will be completed.
0 commit comments