Policyset Deploy-MDFC-Config_20240319 missing parameter(s)

[MikaelJcSoderberg]

Hi.

Before raising a issue I need a quick sanity check:

The new policyset that replaces a old one:
https://github.com/Azure/Enterprise-Scale/blob/main/src/resources/Microsoft.Authorization/policySetDefinitions/Deploy-MDFC-Config_20240319.json

Isn't it missing parameters for this policy:
migrateToMdeTvm

It was the same in the old policy.

I assume that if you are are running defender for servers and using it for Vulnerability scanning you are using defaults and that might explain for the lack of reactions to the parametes missing.

But for me, that are running Qualys(BYOL) I need that be Disabled(Witch I can't since can't effect that policy though a parameter)

I have added a workaround for myself, reusing one of the other parameters that I have as "Disabled":
{ "policyDefinitionReferenceId": "migrateToMdeTvm", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/766e621d-ba95-4e43-a6f2-e945db3d7888", "parameters": { "effect": { "value": "[[parameters('enableAscForServers')]" } }, "groupNames": [] }

[MikaelJcSoderberg]

steph409 seems to agree:
Bug report created
#1694