Issues setting up Governance Rules in Defender for Cloud

Hi @Glenn Boyce , yes this is most likely being caused by the number of projects you have. A way to work around this issue is to use Azure Resource Graph to query for the GCP projects and then use the results of the query to create a custom scope for the Governance Rule. This will allow you to select a smaller subset of projects to include in the scope and avoid the timeout issue.

Try using the following query in Azure Resource Graph:

resources
| where type == "microsoft.resources/subscriptions/providers/Microsoft.Compute/virtualMachines"
| extend projectId = tostring(split(split(id, "/")[4], "-")[0])
| summarize by projectId

This will return a list of GCP project IDs that have virtual machines deployed in them. You can modify the query to include other resource types as needed.

Once you have the list of project IDs, you can create a custom scope for the Governance Rule that includes only the projects in the list. This should hopefully allow you to avoid the timeout issue.

Please let me know if you have any questions and I can help you further.

If this answer helps you please mark "Accept Answer" so other users can reference it.

Thank you,

James

Thanks James much appreciated!!!