Select Parameter value based on subscription

Question

Select Parameter value based on subscription

pgaddam 151

While deploying an SQL VM through ARM template; I have a parameter (sku) to allow values DEV, ENTERPRISE & STANDARD editions. I want to control these values when the deployment is happening for instance: I want to use ENTERRPISE or Standard in Prod subscription and DEV in all other subscriptions. Is there a way to restrict the parameter usage in subscriptions?

0 comments

Answer accepted by question author

0 additional answers

Your answer

Answer 1

AnuragSingh-MSFT 21,566 Moderator

@Pranith-3606, thank you for reaching out to Microsoft Q&A for this question.

Using Azure Policy, you can follow the steps below to achieve it:

1. If all the Subscriptions are contained within the same Management Group, you may create a policy and save it in that Management Group and assign it to individual subscription based on your requirement. However, if the subscriptions are not contained within the same Management Group, you would have to store the Azure Policy in each subscription.

2. The Azure Policy could contain logic to restrict the size/sku of resource. For example, you may refer to this built-in Azure Policy which restricts the VM SKUs - Allowed virtual machine size SKUs

3. Depending on what is allowed, respective sizes could be selected, and the Policy is assigned to the subscription.

Note that this will cause the resource creation to fail after submission. However, it will not restrict user from selecting the particular Size/SKU in template/parameter.

Please let me know if you have any questions.

pgaddam 151 Reputation points

2022-06-20T14:06:52.3+00:00

Hello @AnuragSingh-MSFT

Although this sounds like a potential solution, I am looking for a pipeline to fail while deploying the incorrect version.

Thanks
Pranith
AnuragSingh-MSFT 21,566 Reputation points Moderator

2022-06-21T04:34:23.183+00:00

@Pranith-3606, thank you for the reply. Can you please elaborate on the following points:

1. What do you mean by "...I am looking for a pipeline to fail while deploying"?
2. If you are using PowerShell cmdlet/Cli like New-AzResourceGroupDeployment, you could integrate the logic to check for parameters and subscription and fail before the deployment is submitted.
3. If you are using Portal to deploy resource using UI (create resource), Azure Policy can prevent the selection of parameter in there stating that it violates the policy (If you have already assigned the policy to the subscription).

Please let me know if you have any questions.
AnuragSingh-MSFT 21,566 Reputation points Moderator

2022-06-23T11:16:10.23+00:00

@Pranith-3606, Following up to see if my answer helps. Do let me know if you have any queries.

Share via

Select Parameter value based on subscription

0 additional answers

Your answer