I just started dabbling with policy packs and in a limited experience found that the integration added around 5 minutes to the preview/up commands each (running via the Azure DevOps extension). Is that the expected experience?

Five minutes is a very long time! How long is that relative to the program runtime without policy packs? For example, if the program normally runs in 30s and policy packs slow it down to 5:30, then I’d say that’s certainly not expected! I would expect a marginal decrease in performance, some nontrivial multiplier, but not orders of magnitude.

@future-air-70511 Can you provider some details on a couple of things? 1. How are you acquiring and running the packs? For example, are they directories in the same repo in which your infra code is running? 2. Are you doing any i/o within the policy rules that could be causing the slowness?

Sorry missed this thread. Created a support ticket and it was related to the size of the Azure provider and using both C# for the stack and Typescript for the policy pack.

That makes perfect sense. Yes, we will be drastically reducing the size of that provider in 2.0.

Thank you both for reaching out.

My pleasure!