question

HavardKristiansen avatar image
1 Vote"
HavardKristiansen asked HavardKristiansen commented

parameters associated with it which exceeds the maximum limit of '100'

We're importing an entire compliance policy from https://github.com/Azure/azure-policy/blob/master/built-in-policies/policySetDefinitions/Regulatory%20Compliance/CISv1_3_0.json

But when we try to apply the import we're reciving the error due to parameter restricitons on 100:


Error: creating Policy Set Definition "Azure CIS": policy.SetDefinitionsClient#CreateOrUpdateAtManagementGroup: Failure responding to request: StatusCode=400 -- Original Error: autorest/azure: Service returned an error. Status=400 Code="TooManyPolicySetParameters" Message="The policy set 'Azure CIS' has '111' parameters associated with it which exceeds the maximum limit of '100'."

azure-policy
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @HavardKristiansen,

Thanks for bringing this to our attention. As per this document, maximum parameters for initiative definition is 100. I have reviewed the number of parameters in this definition (which is currently in preview state) and could see 111 parameters as stated in the error message so I am checking internally with the product team regarding this issue and shall provide you an update at the earliest.

2 Votes 2 ·

Hi,

that would be great. Since the code came from a official Microsoft Github repo I expected this definition to be below 100 - or at least that it was left a comment about it.

Regards,
Håvard

1 Vote 1 ·

1 Answer

tbgangav-MSFT avatar image
0 Votes"
tbgangav-MSFT answered HavardKristiansen commented

Hi @HavardKristiansen,

Update:

Built-in policies sometimes have different limits than custom policies. The limit on policies per policySet was increased to allow users to duplicate large policySets but it looks like now the parameter limit has been exceeded as well in a policySet that users want to duplicate. So we will open a task to increase the parameter limit to match what built-ins allow. In the meantime that policySet is a built-in policySet that is already available for any customer in the portal so you do not have to create it yourself.

· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Dear @tbgangav-MSFT,
Thank you for looking in to this and opening a task. Using the portal limits the automation effort with IaC, so it would be great if this could be changed. Splitting it up is an option - but it is rather tedious and just using the default template would save tons of time.

Looking forward to hearing the result from the internal task,
Best regards
Theodor

2 Votes 2 ·

Hi again @tbgangav-MSFT,

Have you heard anything from the task you opened internally? Looking forward to hearing from you,

Best regards,
Theodor

0 Votes 0 ·

Hi @theodorbrander / @HavardKristiansen,

Yes, this is done and docs will be updated shortly.

0 Votes 0 ·

Hi, done like in fixed or just documented...?

0 Votes 0 ·