Skip to content

Commit d7a6630

Browse files
authored
Merge pull request #177473 from sebansal/patch-105
Update azure-policy.md
2 parents 818620d + 21cb0ce commit d7a6630

File tree

1 file changed

+8
-1
lines changed

1 file changed

+8
-1
lines changed

articles/key-vault/general/azure-policy.md

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -238,13 +238,20 @@ You manage a key vault used by multiple teams that contains 100 certificates, an
238238

239239
## Feature Limitations
240240

241-
Assigning a policy with a "deny" effect may take up to 30 mins (average case) and 1 hour (worst case) to start denying the creation of non-compliant resources.
241+
Assigning a policy with a "deny" effect may take up to 30 mins (average case) and 1 hour (worst case) to start denying the creation of non-compliant resources. The delay refers to following scenarios -
242+
1. A new policy is assigned
243+
2. An existing policy assignment is modified
244+
3. A new KeyVault (resource) is created in a scope with existing policies.
245+
242246
The policy evaluation of existing components in a vault may take up to 1 hour (average case) and 2 hours (worst case) before compliance results are viewable in the portal UI.
243247
If the compliance results show up as "Not Started" it may be due to the following reasons:
244248
- The policy valuation has not completed yet. Initial evaluation latency can take up to 2 hours in the worst-case scenario.
245249
- There are no key vaults in the scope of the policy assignment.
246250
- There are no key vaults with certificates within the scope of the policy assignment.
247251

252+
253+
254+
248255
> [!NOTE]
249256
> Azure Policy
250257
> [Resouce Provider modes](../../governance/policy/concepts/definition-structure.md#resource-provider-modes),

0 commit comments

Comments
 (0)