I'm trying to import one of the Builtin Azure Poli...
# azures
straight-sunset-92336
04/06/2022, 8:51 AMI'm trying to import one of the Builtin Azure Policy Definitions to use it in a Policy Assignment, but have some difficulties with the import.
According to the documentation the import should be like this:
pulumi import azure-native:authorization:PolicyDefinition <name> /subscriptions/<subid>/providers/Microsoft.Authorization/policyDefinitions/<definitionid>pulumi import azure-native:authorization:PolicyDefinition ActivityLogStreamToLogAnalytics /subscription/<one of my subscription id's>/providers/Microsoft.Authorization/policyDefinitions/2465583e-4e78-4c15-b6be-a36cbc7c8b0ferror: Preview failed: resource '/subscription/<one of my subscription id's>/providers/Microsoft.Authorization/policyDefinitions/2465583e-4e78-4c15-b6be-a36cbc7c8b0f' does not existg
great-queen-39697
04/06/2022, 9:12 PMI don't, but I'm asking internally.
o
orange-policeman-59119
04/06/2022, 9:25 PMorange-policeman-59119
04/06/2022, 9:26 PMHey @straight-sunset-92336,
Hmm. Import creates code & state to manage the resource, but I believe the built-in roles are immutable & can't be modified by Pulumi.
I don't see that role definition when I run the Azure CLI, either, so I wonder if this might be behind a feature flag. Is this a recently added role definition to Azure?
I found some code we use to manage Azure IAM here at Pulumi, and it looks like this is how we create role assignments. I modified it a bit and pasted it in as a snippet above.
s
straight-sunset-92336
04/07/2022, 6:48 AMI created a ticket and got an answer that it isn't possible to import the builtin definitions.
7 Views