error message about region when trying to create a storage container

Question

I am getting this error and am unsure how to fix it

• Resource 'edwardbeanstorage' was disallowed by Azure: This policy maintains a set of best available regions where your subscription can deploy resources. The objective of this policy is to ensure that your subscription has full access to Azure services with optimal performance. Should you need additional or different regions, contact support.. (Code: RequestDisallowedByAzure, Target: edwardbeanstorage)

Answer 1

Hi Edward,

Azure for Students restricts which regions you can deploy resources to. Typically you are restricted to five different regions, and these vary for each person.

Please navigate to Azure Policy -- Authoring -- Assignments using link below:

https://portal.azure.com/#view/Microsoft_Azure_Policy/PolicyMenuBlade/~/Assignments

Click on assignment named Allowed resource deployment regions

Examine Allowed locations Parameter value for list of regions, similar to below (regions in screenshot are different than yours):

The regions shown in your Parameter value are the ones you are allowed to deploy resources to. Please try to create resources in one of these regions and let me know the results.

Please click Accept Answer and upvote if the above was helpful.

Thanks.

-TP

Answer 2

Hello Edward Bean

Your organization assigns policies to enforce organizational standards and to assess compliance at-scale. If you're trying to deploy a resource that violates a policy, the deployment is blocked.

For example, your subscription can have a policy that prevents public IPs on network interfaces. If you attempt to create a network interface with a public IP address, the policy blocks you from creating the network interface.

1. You can check if there are any Azure Policies applied to your subscription that might restrict deployments. This can usually be done in the Azure Portal under the "Policy" section.
2. Ensure there are no resource locks or deny assignments that could be preventing the creation of the storage account.

To resolve the RequestDisallowedByPolicy error when deploying an ARM template or Bicep file, you need to find which policy is blocking the deployment. Within that policy, you need to review the rules so you can update your deployment to comply with the policy.

The error message includes the names of the policy definition and policy assignment that caused the error. You need these names to get more information about the policy.

To get more information about a policy definition, use az policy definition show.

az policy definition show --name {policy-name}

To get more information about a policy assignment, use az policy assignment show.

az policy assignment show --name {assignment-name} --resource-group {resource-group-name}

Within the policy definition, you see a description of the policy and the rules that are applied. Review the rules and update your ARM template or Bicep file to comply with the rules. For example, if the rule states the public network access is disabled, you need to update the corresponding resource properties.

For more information, see the following articles:

• What is Azure Policy?
• Tutorial: Create and manage policies to enforce compliance
• Azure Policy built-in policy definitions
• Unable to Create a Storage Account
• Azure Policy Overview
• Check for Deny Assignments

---

Hope the above answer helps! Please let us know do you have any further queries.

Please do consider to “up-vote” wherever the information provided helps you, this can be beneficial to other community members.