CODEWITHSUNDEEP
azure-cliazure-rm-template
Albert Samigullin
Albert Samigullin

Reputation: 11

DeploymentScriptOperationFailed when running Microsoft.Resources/deploymentScripts

We've been using Microsoft.Resources/deploymentScripts for about a year now and never had any issues. To run script, we are using User Managed Identity. No changes to the template were made from our side. Recently we started seeing this error

{"code":"DeploymentScriptOperationFailed","message":"Resource '23fl75rmqngz2azscripts' was disallowed by policy. Reasons: 'Shared Storage Access Keys are not allowed'. See error details for policy resource IDs."}

Looks like it tries to connect to storage account using Storage Access Keys but they are not allowed.

The Storage Settings in Microsoft.Resources/deploymentScripts template consist only from name and key.

https://learn.microsoft.com/en-us/azure/templates/microsoft.resources/deploymentscripts?pivots=deployment-language-arm-template#storageaccountconfiguration-1

Can you please help with workaround/solution?

Upvotes: 1

Views: 134

Answers (1)

Albert Samigullin
Albert Samigullin

Reputation: 11

Turned out my colleague enforced this policy. Our team is unblocked.

Upvotes: 0

Related Questions