diff --git a/en/azure/azurepolicy/resource-location-matches-resource-group.md b/en/azure/azurepolicy/resource-location-matches-resource-group.md index 4ae3738df..98e6e7f0f 100644 --- a/en/azure/azurepolicy/resource-location-matches-resource-group.md +++ b/en/azure/azurepolicy/resource-location-matches-resource-group.md @@ -12,19 +12,17 @@ | **Description** | Ensures a policy is configured to audit that deployed resource locations match their resource group locations | | **More Info** | Using Azure Policy to monitor resource location compliance helps ensure that new resources are not launched into locations that do not match their resource group. | | **AZURE Link** | https://docs.microsoft.com/en-us/azure/governance/policy/assign-policy-portal | -| **Recommended Action** | Enable the built-in Azure Policy definition: Audit resource location matches resource group location | +| **Recommended Action** | Enable the built-in Azure Policy definition: Audit resource location matches resource group location. | ## Detailed Remediation Steps - 1. Log into the Microsoft Azure Management Console. -2. Select the "Search resources, services, and docs" option at the top and search for Policy.
-3. On the "Policy" page, scroll down the left navigation panel and choose "Assignments" under "Authoring."
+2. Find the search bar at the top and search for Policy.
+3. On the "Policy" page, scroll down the left navigation panel and choose "Assignments" under "Authoring".
4. On the "Policy - Assignments" page, check the "Policies" listed and if there are no "Policies" for "Resource Location Matches Resource Group" then the selected "Assignment" don't have any "Resource Location Matches Resource Group" policy.
-5. Repeat steps number 2 - 4 to check different "Policy - Assignments."
-6. Navigate to "Policy", scroll down the left navigation panel and choose "Assignemts" and on the "Policy - Assignments" page click on the "Assign Policy" at the top to assign "Resource Location Matches Resource Group" policy.
-7. On the "Assign Policy" page, select the "Scope" accordingly and click on the "..." dots icon to select the "Policy definition" under the "Basics" option.
-8. On the "Available Definitions" page, click on the "Search" box at the tab and search for "Allowed locations for resource groups" and click on the "Select" button at the bottom.
-9. Provide the "Description" accordingly and click on the "Next" button at the bottom.
-10. On the "Remediation" page, click on the checkbox next to the "Create a Managed Identity" and select the "Managed Identity Location" accordingly.
-11. Click on the "Review + Create" button to create the specific "Resource Location Matches Resource Group" policy.
-12. Repeat steps number 6 - 11 to enable the built-in Azure Policy definition: Audit resource location matches resource group location.
+5. If there is no policy for "Resource Location Matches Resource Group" then click on "Assign policy" at the top to create a new policy.
+6. On the "Assign Policy" page, under "Basics" tab, select "Scope" accordingly and click on the "..." dots icon next to "Policy definition".
+7. On the "Available Definitions" page, click on the "Search" box and search for "Resource Location Matches Resource Group". Click the Policy Definition found and then click "Select" button at the bottom.
+8. Once back on the "Assign Policy" page, provide a "Description" and click on the "Next" button at the bottom. Now select "Allowed locations" on "Parameters" tab and click Next at the bottom.
+9. On the "Remediation" tab, click on the checkbox next to the "Create a Managed Identity" and select desired "Managed Identity Location". Click "Review + create" button at the bottom.
+10. On the "Review + Create" tab, click "Create" button at the bottom to create the specific "Resource Location Matches Resource Group" policy.
+11. Repeat steps number 6 - 10 to enable the built-in "Azure Policy definition: Audit resource location matches resource group location" for all directories.
diff --git a/resources/azure/azurepolicy/resource-location-matches-resource-group/step10.png b/resources/azure/azurepolicy/resource-location-matches-resource-group/step10.png index bb7ef92ee..323fe86aa 100644 Binary files a/resources/azure/azurepolicy/resource-location-matches-resource-group/step10.png and b/resources/azure/azurepolicy/resource-location-matches-resource-group/step10.png differ diff --git a/resources/azure/azurepolicy/resource-location-matches-resource-group/step2.png b/resources/azure/azurepolicy/resource-location-matches-resource-group/step2.png index db10191eb..230516cfa 100644 Binary files a/resources/azure/azurepolicy/resource-location-matches-resource-group/step2.png and b/resources/azure/azurepolicy/resource-location-matches-resource-group/step2.png differ diff --git a/resources/azure/azurepolicy/resource-location-matches-resource-group/step3.png b/resources/azure/azurepolicy/resource-location-matches-resource-group/step3.png index d31265905..b4e8c7318 100644 Binary files a/resources/azure/azurepolicy/resource-location-matches-resource-group/step3.png and b/resources/azure/azurepolicy/resource-location-matches-resource-group/step3.png differ diff --git a/resources/azure/azurepolicy/resource-location-matches-resource-group/step4.png b/resources/azure/azurepolicy/resource-location-matches-resource-group/step4.png index c958bd862..a392f0055 100644 Binary files a/resources/azure/azurepolicy/resource-location-matches-resource-group/step4.png and b/resources/azure/azurepolicy/resource-location-matches-resource-group/step4.png differ diff --git a/resources/azure/azurepolicy/resource-location-matches-resource-group/step5.png b/resources/azure/azurepolicy/resource-location-matches-resource-group/step5.png new file mode 100644 index 000000000..6b97a726d Binary files /dev/null and b/resources/azure/azurepolicy/resource-location-matches-resource-group/step5.png differ diff --git a/resources/azure/azurepolicy/resource-location-matches-resource-group/step6.png b/resources/azure/azurepolicy/resource-location-matches-resource-group/step6.png index a7e33656e..0bb65f7d9 100644 Binary files a/resources/azure/azurepolicy/resource-location-matches-resource-group/step6.png and b/resources/azure/azurepolicy/resource-location-matches-resource-group/step6.png differ diff --git a/resources/azure/azurepolicy/resource-location-matches-resource-group/step7.png b/resources/azure/azurepolicy/resource-location-matches-resource-group/step7.png index b56126d21..d15d9fdec 100644 Binary files a/resources/azure/azurepolicy/resource-location-matches-resource-group/step7.png and b/resources/azure/azurepolicy/resource-location-matches-resource-group/step7.png differ diff --git a/resources/azure/azurepolicy/resource-location-matches-resource-group/step8.png b/resources/azure/azurepolicy/resource-location-matches-resource-group/step8.png index e694b8de5..534ddacec 100644 Binary files a/resources/azure/azurepolicy/resource-location-matches-resource-group/step8.png and b/resources/azure/azurepolicy/resource-location-matches-resource-group/step8.png differ diff --git a/resources/azure/azurepolicy/resource-location-matches-resource-group/step9.png b/resources/azure/azurepolicy/resource-location-matches-resource-group/step9.png index 31a59a87a..0bce1639b 100644 Binary files a/resources/azure/azurepolicy/resource-location-matches-resource-group/step9.png and b/resources/azure/azurepolicy/resource-location-matches-resource-group/step9.png differ