Patch logic for Policy Assignments
This release provides the following updates:
parameters
specified by the customer for Policy Assignments will now take precedence over those managed by the module, providing a way to override parameter values set by themanagement
child module.enforcement_mode
settings from the Policy Assignment template will also take precedence over those managed by the module, providing a way to override the value set by themanagement
child module.- Provides seperation between the
management
settings controlled through theconfigure_management_resources
input variable, and thedeploy_management_resources
input variable which now only determines whether the management resources get deployed or not. This provides the ability to segregate the deployment ofcore
andmanagement
resources into seperate module blocks, or even seperate pipelines, whilst allowing correct settings on both. - Internal tests are updated to provide coverage for the above changes, including the ability to test the full resource creation process when
deploy_management_resources = true