How to reduce refresh time of compliance state of custom policies from 24 hours to less than that?

Question

How to reduce refresh time of compliance state of custom policies from 24 hours to less than that?

V, Gukan 1

custom policies which we are creating takes 1 day to reflect the compliance state , Is there any to reduce the time or someplace where we can get the compliance state sooner.

1 answer

Your answer

Answer 1

SwathiDhanwada-MSFT 18,996 Moderator

@V, Gukan Welcome to Microsoft Q & A Community Forum. I understand you want to trigger on demand evaluation of azure policies compliance. For this, you can use on demand evaluation scan feature of Azure Policy. An evaluation scan for a subscription or a resource group can be started with Azure CLI, Azure PowerShell, a call to the REST API.

Azure CLI command to trigger on demand scan : az policy state trigger-scan

For more information, refer this document.

V, Gukan 1 Reputation point

2022-11-25T07:18:50.097+00:00

(Get-AzPolicyState -ResourceId $resourceId -Filter "PolicyDefinitionName eq '$policyDefinitionName'" ).ComplianceState we are using this for getting the compliance state but for some custom policies, the compliance state is taking 24 hours to reflect. Is there any way to get the accurate compliance state in a shorter duration of time?
V, Gukan 1 Reputation point

2022-11-25T11:23:40.653+00:00

(Get-AzPolicyState -ResourceId $resourceId -Filter "PolicyDefinitionName eq '$policyDefinitionName'" ).ComplianceState we are using this for getting the compliance state but for some custom policies, the compliance state is taking 24 hours to reflect. Is there any way to get the accurate compliance state in a shorter duration of time?
SwathiDhanwada-MSFT 18,996 Reputation points Moderator

2022-11-30T06:04:46.333+00:00
@V, Gukan Indeed, Azure Policy evaluates resource compliance automatically every 24 hours for already assigned policies or initiatives. To evaluate the compliance on demand, you can use Start-AzPolicyComplianceScan Powershell command.

$job = Start-AzPolicyComplianceScan -AsJob

You can check on the status of the job by checking on the $job object. The job is of the type Microsoft.Azure.Commands.Common.AzureLongRunningJob. Use Get-Member on the $job object to see available properties and methods.

$job Id Name PSJobTypeName State HasMoreData Location Command \-- ---- ------------- ----- ----------- -------- ------- 2 Long Running O... AzureLongRunni... Running True localhost Start-AzPolicyCompliance...

When the compliance scan completes, the State property changes to Completed.

Share via

How to reduce refresh time of compliance state of custom policies from 24 hours to less than that?

1 answer

Your answer