Azure-docs: Triggering policy evaluation

Created on 9 Oct 2018 · 12Comments · Source: MicrosoftDocs/azure-docs

How frequently the policy gets evaluated? can we change that frequency? or trigger it manually somehow? Its taking huge effort to test authored policies and assignments and results are not consistent, dev, test and fix cycles are taking long time

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 07fab47b-3b7a-c02e-c863-2c60f0e06f94
Version Independent ID: f1643e7a-14eb-c372-8099-2f412c954717
Content: Overview of Azure Policy
Content Source: articles/governance/policy/overview.md
Service: azure-policy
GitHub Login: @DCtheGeek
Microsoft Alias: dacoulte

Pri1 assigned-to-author azure-policsvc doc-enhancement in-progress triaged

Source

badalk

All 12 comments

@badalk Thanks for the Comment. We are actively investigating and will get back to you soon.

femsulu on 10 Oct 2018

@badalk Thanks for the question! Details about when policy is evaluated is documented here. Triggering evaluation is now possible, but the doc hasn't yet been published. I'm working on it and hope to have it ready shortly. I'll update this Issue when it is published. Thanks!

@MicrosoftDocs/azure-cxp-triage Please assign to me, add label 'doc-enhancement', and #in-progress.

DCtheGeek on 10 Oct 2018

@DCtheGeek Any Update on documentation of How to trigger evaluation manually?

devanshujoshi on 25 Oct 2018

Please share details about manual triggers since it would really help while testing custom policy definitions.

diwsun on 28 Oct 2018

@diwsun I apologize for the delay. I'll have it posted by mid-week!

DCtheGeek on 29 Oct 2018

@badalk @devanshujoshi @diwsun This content went live yesterday! Give it a look and let me know if there are questions: On demand evaluation scan. If there are issues, let me know and I'll enhance. Otherwise, I'm going to close this Issue now. Thanks for both the feedback and the patience.

@MicrosoftDocs/azure-cxp-triage #please-close

DCtheGeek on 30 Oct 2018

👍1

@DCtheGeek I appreciate the write up but I feel it is failing on results. When attempting a triggered Eval via the POST to the subscription, using the PS provided to generate the Bearer token, the response is blank using the trigEval uri... When attempting to use the token generated in ARC, I get a 401 even tho I am owner of the subscription in question. What am I missing?

ms662412 on 16 Jan 2019

@ms662412 Not sure which "PS provided to generate the Bearer token" you are talking about. I'd recommend trying the POST through ARMClient which does login for you. If that also doesn't work, please open as a new Issue so we can try and address. If it's a problem with the instructions, however, then I'd like to figure that out so we can clear up any confusion or inaccuracies. Otherwise, it may end up being a support case since that kind of troubleshooting starts to fall outside of docs.

DCtheGeek on 18 Jan 2019

Is not this do what is being asked without complexity of manually invoking it via POST method?
Invoke-AzureRmResourceAction -ResourceType Microsoft.PolicyInsights/policyStates -Action triggerEvaluation -ResourceName latest -ApiVersion 2018-07-01-preview

artisticcheese on 2 Jul 2019

👍1

@DCtheGeek Is this feature still active?

I'm using the JWT token from the Try out section as Authorization header in my request to make sure auth is working.
However, whatever I try to do, the best I can get is:

<html>
    <head>
        <meta http-equiv="Content-Type" content="text/html;charset=utf-8">
        <title>Error response</title>
    </head>
    <body>
        <h1>Error response</h1>
        <p>Error code: 501</p>
        <p>Message: Not Implemented.</p>
        <p>Error code explanation: 501 - Server does not support this operation.</p>
    </body>
</html>

timgrossmann on 20 Jan 2020

@timgrossmann I just tried via ARMClient and it worked fine. I'd recommend validating with ARMClient. If that doesn't work, please open a support ticket so the team can help as it doesn't appear to be an issue with the doc. Thanks!

DCtheGeek on 21 Jan 2020

👍1

@DCtheGeek Thank you for checking it.

I'll double check with the ARM client and see if it works using that instead of the REST API.

Thanks

timgrossmann on 21 Jan 2020

Was this page helpful?

0 / 5 - 0 ratings