Skip to content

Commit 265e026

Browse files
committed
updates effect links
1 parent 789b856 commit 265e026

16 files changed

+98
-99
lines changed

articles/governance/policy/assign-policy-portal.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -58,7 +58,7 @@ In this quickstart, you create a policy assignment with a built-in policy defini
5858
| Tab name | Options |
5959
| ---- | ---- |
6060
| **Parameters** | If the policy definition you selected on the **Basics** tab has parameters, you configure them on the **Parameters** tab. This example doesn't use parameters. |
61-
| **Remediation** | You can create a managed identity. For this example, **Create a Managed Identity** is unchecked. <br><br> This box _must_ be checked when a policy or initiative includes a policy with either the [deployIfNotExists](./concepts/effects.md#deployifnotexists) or [modify](./concepts/effects.md#modify) effect. For more information, go to [managed identities](../../active-directory/managed-identities-azure-resources/overview.md) and [how remediation access control works](./how-to/remediate-resources.md#how-remediation-access-control-works). |
61+
| **Remediation** | You can create a managed identity. For this example, **Create a Managed Identity** is unchecked. <br><br> This box _must_ be checked when a policy or initiative includes a policy with either the [deployIfNotExists](./concepts/effect-deploy-if-not-exists.md) or [modify](./concepts/effect-modify.md) effect. For more information, go to [managed identities](../../active-directory/managed-identities-azure-resources/overview.md) and [how remediation access control works](./how-to/remediate-resources.md#how-remediation-access-control-works). |
6262

6363
1. Select **Next** and on the **Non-compliance messages** tab create a **Non-compliance message** like _Virtual machines should use managed disks_.
6464

articles/governance/policy/concepts/assignment-structure.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -275,7 +275,7 @@ One override can be used to replace the effect of many policies by specifying mu
275275

276276
The `enforcementMode` property provides customers the ability to test the outcome of a policy on existing resources without initiating the policy effect or triggering entries in the [Azure Activity log](/azure/azure-monitor/essentials/platform-logs-overview).
277277

278-
This scenario is commonly referred to as _What If_ and aligns to safe deployment practices. `enforcementMode` is different from the [Disabled](./effects.md#disabled) effect, as that effect prevents resource evaluation from happening at all.
278+
This scenario is commonly referred to as _What If_ and aligns to safe deployment practices. `enforcementMode` is different from the [Disabled](./effect-disabled.md) effect, as that effect prevents resource evaluation from happening at all.
279279

280280
This property has the following values:
281281

@@ -284,7 +284,7 @@ This property has the following values:
284284
|Enabled |Default |string |Yes |Yes |The policy effect is enforced during resource creation or update. |
285285
|Disabled |DoNotEnforce |string |Yes |No | The policy effect isn't enforced during resource creation or update. |
286286

287-
If `enforcementMode` isn't specified in a policy or initiative definition, the value _Default_ is used. [Remediation tasks](../how-to/remediate-resources.md) can be started for [deployIfNotExists](./effects.md#deployifnotexists) policies, even when `enforcementMode` is set to _DoNotEnforce_.
287+
If `enforcementMode` isn't specified in a policy or initiative definition, the value _Default_ is used. [Remediation tasks](../how-to/remediate-resources.md) can be started for [deployIfNotExists](./effect-deploy-if-not-exists.md) policies, even when `enforcementMode` is set to _DoNotEnforce_.
288288

289289
## Excluded scopes
290290

articles/governance/policy/concepts/definition-structure-alias.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ The list of aliases is always growing. To find which aliases Azure Policy suppor
3030
```
3131

3232
> [!NOTE]
33-
> To find aliases that can be used with the [modify](./effects.md#modify) effect, use the
33+
> To find aliases that can be used with the [modify](./effect-modify.md) effect, use the
3434
> following command in Azure PowerShell **4.6.0** or higher:
3535
>
3636
> ```azurepowershell-interactive
@@ -83,7 +83,7 @@ For more information and examples, see [Referencing array resource properties](.
8383
- For more information about policy definition structure, go to [basics](./definition-structure-basics.md), [parameters](./definition-structure-parameters.md), and [policy rule](./definition-structure-policy-rule.md).
8484
- For initiatives, go to [initiative definition structure](./initiative-definition-structure.md).
8585
- Review examples at [Azure Policy samples](../samples/index.md).
86-
- Review [Understanding policy effects](effects.md).
86+
- Review [Understanding policy effects](effect-basics.md).
8787
- Understand how to [programmatically create policies](../how-to/programmatically-create.md).
8888
- Learn how to [get compliance data](../how-to/get-compliance-data.md).
8989
- Learn how to [remediate non-compliant resources](../how-to/remediate-resources.md).

articles/governance/policy/concepts/definition-structure-parameters.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -193,7 +193,7 @@ The non _resource type_ allowed values for `strongType` are:
193193
- For more information about policy definition structure, go to [basics](./definition-structure-basics.md), [policy rule](./definition-structure-policy-rule.md), and [alias](./definition-structure-alias.md).
194194
- For initiatives, go to [initiative definition structure](./initiative-definition-structure.md).
195195
- Review examples at [Azure Policy samples](../samples/index.md).
196-
- Review [Understanding policy effects](effects.md).
196+
- Review [Understanding policy effects](effect-basics.md).
197197
- Understand how to [programmatically create policies](../how-to/programmatically-create.md).
198198
- Learn how to [get compliance data](../how-to/get-compliance-data.md).
199199
- Learn how to [remediate non-compliant resources](../how-to/remediate-resources.md).

articles/governance/policy/concepts/definition-structure-policy-rule.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -633,7 +633,7 @@ The following functions are only available in policy rules:
633633
- `field(fieldName)`
634634
- `fieldName`: [Required] string - Name of the [field](./definition-structure-policy-rule.md#fields) to retrieve
635635
- Returns the value of that field from the resource that is being evaluated by the If condition.
636-
- `field` is primarily used with `auditIfNotExists` and `deployIfNotExists` to reference fields on the resource that are being evaluated. An example of this use can be seen in the [DeployIfNotExists example](effects.md#deployifnotexists-example).
636+
- `field` is primarily used with `auditIfNotExists` and `deployIfNotExists` to reference fields on the resource that are being evaluated. An example of this use can be seen in the [DeployIfNotExists example](effect-deploy-if-not-exists.md-example).
637637

638638
- `requestContext().apiVersion`
639639
- Returns the API version of the request that triggered policy evaluation (example: `2021-09-01`). This value is the API version that was used in the PUT/PATCH request for evaluations on resource creation/update. The latest API version is always used during compliance evaluation on existing resources.
@@ -727,7 +727,7 @@ The length of the string created by the `concat()` function depends on the value
727727
- For more information about policy definition structure, go to [basics](./definition-structure-basics.md), [parameters](./definition-structure-parameters.md), and [alias](./definition-structure-alias.md).
728728
- For initiatives, go to [initiative definition structure](./initiative-definition-structure.md).
729729
- Review examples at [Azure Policy samples](../samples/index.md).
730-
- Review [Understanding policy effects](effects.md).
730+
- Review [Understanding policy effects](effect-basics.md).
731731
- Understand how to [programmatically create policies](../how-to/programmatically-create.md).
732732
- Learn how to [get compliance data](../how-to/get-compliance-data.md).
733733
- Learn how to [remediate non-compliant resources](../how-to/remediate-resources.md).

articles/governance/policy/concepts/initiative-definition-structure.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -392,7 +392,7 @@ Below is an example of the **policyMetadata** object. This example metadata belo
392392

393393
- See the [definition structure](./definition-structure.md)
394394
- Review examples at [Azure Policy samples](../samples/index.md).
395-
- Review [Understanding policy effects](effects.md).
395+
- Review [Understanding policy effects](effect-basics.md).
396396
- Understand how to [programmatically create policies](../how-to/programmatically-create.md).
397397
- Learn how to [get compliance data](../how-to/get-compliance-data.md).
398398
- Learn how to [remediate non-compliant resources](../how-to/remediate-resources.md).

articles/governance/policy/concepts/policy-as-code.md

Lines changed: 5 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ The file names correspond with certain portions of policy or initiative definiti
4343
| `policyset-v#.parameters.json` | The `properties.parameters` portion of the initiative definition |
4444
| `policy-v#.rules.json` | The `properties.policyRule` portion of the policy definition |
4545
| `policyset-v#.definitions.json` | The `properties.policyDefinitions` portion of the initiative definition |
46-
| `exemptionName.json` | The policy exemption that targets a particular resource or scope |
46+
| `exemptionName.json` | The policy exemption that targets a particular resource or scope |
4747

4848

4949
## Workflow overview
@@ -56,7 +56,7 @@ The recommended general workflow of Azure Policy as Code looks like this diagram
5656

5757
### Source control
5858

59-
Existing [policy and initiative definitions can be exported](../how-to/export-resources.md) different ways such as through PowerShell, CLI, or [Azure Resource Graph (ARG)](../../resource-graph/overview.md) queries. The source control management environment of choice to store these definitions can be one of many options, including a [GitHub](https://www.github.com) or [Azure DevOps](/azure/devops/user-guide/what-is-azure-devops).
59+
Existing [policy and initiative definitions can be exported](../how-to/export-resources.md) different ways such as through PowerShell, CLI, or [Azure Resource Graph (ARG)](../../resource-graph/overview.md) queries. The source control management environment of choice to store these definitions can be one of many options, including a [GitHub](https://www.github.com) or [Azure DevOps](/azure/devops/user-guide/what-is-azure-devops).
6060

6161
### Create and update policy definitions
6262

@@ -146,7 +146,7 @@ the update to the object in Azure, it's time to test the changes that were made.
146146
or the initiative(s) it's part of should then be assigned to resources in the environment farthest
147147
from production. This environment is typically _Dev_.
148148

149-
>[!NOTE]
149+
>[!NOTE]
150150
> In this step, we are conducting integration testing of the policy definition within your Azure environment, this is seperate from [verfying the functionality of the policy definition](./evaluate-impact.md#test-your-policys-effectiveness) which should occur during the definition creation process.
151151
152152
The assignment should use [enforcementMode](./assignment-structure.md#enforcement-mode) of
@@ -171,8 +171,8 @@ may be unexpected and unidentified impact from the policy. For more information,
171171
### Enable remediation tasks
172172

173173
If validation of the assignment meets expectations, the next step is to validate remediation.
174-
Policies that use either [deployIfNotExists](./effects.md#deployifnotexists) or
175-
[modify](./effects.md#modify) can have an associated remediation task triggered to correct resources from a non-compliant state and bring them into compliance.
174+
Policies that use either [deployIfNotExists](./effect-deploy-if-not-exists.md) or
175+
[modify](./effect-modify.md) can have an associated remediation task triggered to correct resources from a non-compliant state and bring them into compliance.
176176

177177
The first step to remediating resources is to grant the policy assignment the role assignment
178178
defined in the policy definition. This role assignment gives the policy assignment managed identity
@@ -227,4 +227,3 @@ supports scripted steps and automation based on triggers.
227227
- Learn how to [get compliance data](../how-to/get-compliance-data.md).
228228
- Learn how to [remediate non-compliant resources](../how-to/remediate-resources.md).
229229
- Under how to [follow policy safe deployment practices](../how-to/policy-safe-deployment-practices.md)
230-

articles/governance/policy/concepts/regulatory-compliance.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -94,5 +94,5 @@ The following code is an example of added results from a `summarize` call:
9494

9595
- See the [initiative definition structure](./initiative-definition-structure.md)
9696
- Review examples at [Azure Policy samples](../samples/index.md).
97-
- Review [Understanding policy effects](./effects.md).
97+
- Review [Understanding policy effects](./effect-basics.md).
9898
- Learn how to [remediate non-compliant resources](../how-to/remediate-resources.md).

articles/governance/policy/how-to/author-policies-for-arrays.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -617,7 +617,7 @@ For useful examples, see [Field count examples](../concepts/definition-structure
617617

618618
## Modifying arrays
619619

620-
The [append](../concepts/effects.md#append) and [modify](../concepts/effects.md#modify) alter properties on a resource during creation or update. When you work with array properties, the behavior of these effects depends on whether the operation is trying to modify the `[*]` alias or not:
620+
The [append](../concepts/effect-append.md) and [modify](../concepts/effect-modify.md) alter properties on a resource during creation or update. When you work with array properties, the behavior of these effects depends on whether the operation is trying to modify the `[*]` alias or not:
621621

622622
> [!NOTE]
623623
> Using the `modify` effect with aliases is currently in **preview**.
@@ -634,7 +634,7 @@ The [append](../concepts/effects.md#append) and [modify](../concepts/effects.md#
634634
| `Microsoft.Storage/storageAccounts/networkAcls.ipRules[*].action` | `modify` with `add` operation | Azure Policy appends a value to the `action` property of each array member. |
635635
| `Microsoft.Storage/storageAccounts/networkAcls.ipRules[*].action` | `modify` with `addOrReplace` operation | Azure Policy appends or replaces the existing `action` property of each array member. |
636636

637-
For more information, see the [append examples](../concepts/effects.md#append-examples).
637+
For more information, see the [append examples](../concepts/effect-append.md#append-examples).
638638

639639
## More alias examples
640640

articles/governance/policy/how-to/determine-non-compliance.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -54,8 +54,8 @@ To view the compliance details, follow these steps:
5454

5555
For an `auditIfNotExists` or `deployIfNotExists` policy definition, the details include the
5656
**details.type** property and any optional properties. For a list, see [auditIfNotExists
57-
properties](../concepts/effects.md#auditifnotexists-properties) and [deployIfNotExists
58-
properties](../concepts/effects.md#deployifnotexists-properties). **Last evaluated resource** is
57+
properties](../concepts/effect-audit-if-not-exists.md#auditifnotexists-properties) and [deployIfNotExists
58+
properties](../concepts/effect-deploy-if-not-exists.md#deployifnotexists-properties). **Last evaluated resource** is
5959
a related resource from the **details** section of the definition.
6060

6161
Example partial `deployIfNotExists` definition:
@@ -253,7 +253,7 @@ query this information outside of the Azure portal, see [Get resource changes](.
253253

254254
- Review examples at [Azure Policy samples](../samples/index.md).
255255
- Review the [Azure Policy definition structure](../concepts/definition-structure.md).
256-
- Review [Understanding policy effects](../concepts/effects.md).
256+
- Review [Understanding policy effects](../concepts/effect-basics.md).
257257
- Understand how to [programmatically create policies](programmatically-create.md).
258258
- Learn how to [get compliance data](get-compliance-data.md).
259259
- Learn how to [remediate non-compliant resources](remediate-resources.md).

0 commit comments

Comments
 (0)