Whats the difference between the azure-native provider and azure classic? I've been using azure-native.authorization.PolicyDefinition but have hit a resource where it doesn't look like it supports specifying a management group, where as with Azure classic it does. So I'm not sure which provider I should be targeting to use(and why azure-native would be missing this)? edit. Oh damn I just realized there is a azure-native.authorization.PolicyDefinitionAtManagementGroup which I didn't notice. This looks like it will do what I'm after though I'm not sure why they are separate.

Azure Native is built directly from the ARM API Azure Classic is bridged from the Terraform provider

ah ok thanks that makes sense. So native is the way to go.