Updating MG API version (#1894)

Azure · Jan 23, 2025 · 7ea9b36 · 7ea9b36
1 parent 98b259b
commit 7ea9b36
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 13 deletions.
diff --git a/docs/wiki/Whats-new.md b/docs/wiki/Whats-new.md
@@ -66,6 +66,7 @@ Here's what's changed in Enterprise Scale/Azure Landing Zones:
 - Removed duplicate policy assignment "Container Apps should only be accessible over HTTPS" from initiative [Enforce-EncryptTransit_20241211](https://www.azadvertizer.net/azpolicyinitiativesadvertizer/Enforce-EncryptTransit_2024.html). Note, this is a breaking change, and existing assignments should be removed and re-assigned.
 - Added new custom policies [Audit-Tags-Mandatory](https://www.azadvertizer.net/azpolicyadvertizer/Audit-Tags-Mandatory.html) and [Audit-Tags-Mandatory-Rg](https://www.azadvertizer.net/azpolicyadvertizer/Audit-Tags-Mandatory-Rg.html) to support auditing for the existence of mandatory tags (based on an array of tags). Not assigned by default.
 - Updated the Workload Specific Compliance initiative section in the portal accelerator to allow configuring `Audit Only` effect for workloads using the `DoNotEnforce` enforcement mode.
+- Updated the Management Group creation template to use the latest API version `2023-04-01`.
 
 ### December 2024
 

diff --git a/eslzArm/managementGroupTemplates/mgmtGroupStructure/mgmtGroups.json b/eslzArm/managementGroupTemplates/mgmtGroupStructure/mgmtGroups.json
@@ -43,14 +43,14 @@
             // Create top level management group under tenant root
             "type": "Microsoft.Management/managementGroups",
             "scope": "/",
-            "apiVersion": "2020-05-01",
+            "apiVersion": "2023-04-01",
             "name": "[parameters('topLevelManagementGroupPrefix')]",
             "properties": {}
         },
         {
             // Create management group for platform management groups
             "type": "Microsoft.Management/managementGroups",
-            "apiVersion": "2020-05-01",
+            "apiVersion": "2023-04-01",
             "scope": "/",
             "name": "[variables('enterpriseScaleManagementGroups').platform]",
             "dependsOn": [
@@ -68,7 +68,7 @@
         {
             // Create management group for landing zones
             "type": "Microsoft.Management/managementGroups",
-            "apiVersion": "2020-05-01",
+            "apiVersion": "2023-04-01",
             "scope": "/",
             "name": "[variables('enterpriseScaleManagementGroups').landingZone]",
             "dependsOn": [
@@ -86,7 +86,7 @@
         {
             // Create management group for sandbox subscriptions
             "type": "Microsoft.Management/managementGroups",
-            "apiVersion": "2020-05-01",
+            "apiVersion": "2023-04-01",
             "scope": "/",
             "name": "[variables('enterpriseScaleManagementGroups').sandboxes]",
             "dependsOn": [
@@ -104,7 +104,7 @@
         {
             // Create management group for decommissioned subscriptions
             "type": "Microsoft.Management/managementGroups",
-            "apiVersion": "2020-05-01",
+            "apiVersion": "2023-04-01",
             "scope": "/",
             "name": "[variables('enterpriseScaleManagementGroups').decommissioned]",
             "dependsOn": [
@@ -123,7 +123,7 @@
             // Create child management groups for platform resources
             "condition": "[not(empty(parameters('platformMgs')))]",
             "type": "Microsoft.Management/managementGroups",
-            "apiVersion": "2020-05-01",
+            "apiVersion": "2023-04-01",
             "scope": "/",
             "name": "[concat(parameters('topLevelManagementGroupPrefix'), '-', parameters('platformMgs')[copyIndex()])]",
             "dependsOn": [
@@ -146,7 +146,7 @@
             // Create child management groups for landing zones
             "condition": "[not(empty(parameters('landingZoneMgs')))]",
             "type": "Microsoft.Management/managementGroups",
-            "apiVersion": "2020-05-01",
+            "apiVersion": "2023-04-01",
             "scope": "/",
             "name": "[concat(parameters('topLevelManagementGroupPrefix'), '-', parameters('landingZoneMgs')[copyIndex()])]",
             "dependsOn": [

diff --git a/eslzArm/managementGroupTemplates/mgmtGroupStructure/mgmtGroupsLite.json b/eslzArm/managementGroupTemplates/mgmtGroupStructure/mgmtGroupsLite.json
@@ -31,14 +31,14 @@
         {
             // Create top level management group under tenant root
             "type": "Microsoft.Management/managementGroups",
-            "apiVersion": "2020-05-01",
+            "apiVersion": "2023-04-01",
             "name": "[parameters('topLevelManagementGroupPrefix')]",
             "properties": {}
         },
         {
             // Create management group for platform management groups
             "type": "Microsoft.Management/managementGroups",
-            "apiVersion": "2020-05-01",
+            "apiVersion": "2023-04-01",
             "name": "[variables('enterpriseScaleManagementGroups').platform]",
             "dependsOn": [
                 "[tenantResourceId('Microsoft.Management/managementGroups/', parameters('topLevelManagementGroupPrefix'))]"
@@ -55,7 +55,7 @@
         {
             // Create management group for landing zones
             "type": "Microsoft.Management/managementGroups",
-            "apiVersion": "2020-05-01",
+            "apiVersion": "2023-04-01",
             "name": "[variables('enterpriseScaleManagementGroups').landingZone]",
             "dependsOn": [
                 "[tenantResourceId('Microsoft.Management/managementGroups/', parameters('topLevelManagementGroupPrefix'))]"
@@ -72,7 +72,7 @@
         {
             // Create management group for sandbox subscriptions
             "type": "Microsoft.Management/managementGroups",
-            "apiVersion": "2020-05-01",
+            "apiVersion": "2023-04-01",
             "name": "[variables('enterpriseScaleManagementGroups').sandboxes]",
             "dependsOn": [
                 "[tenantResourceId('Microsoft.Management/managementGroups/', parameters('topLevelManagementGroupPrefix'))]"
@@ -89,7 +89,7 @@
         {
             // Create management group for decommissioned subscriptions
             "type": "Microsoft.Management/managementGroups",
-            "apiVersion": "2020-05-01",
+            "apiVersion": "2023-04-01",
             "name": "[variables('enterpriseScaleManagementGroups').decommissioned]",
             "dependsOn": [
                 "[tenantResourceId('Microsoft.Management/managementGroups/', parameters('topLevelManagementGroupPrefix'))]"
@@ -107,7 +107,7 @@
             // Create child management groups for landing zones
             "condition": "[not(empty(parameters('landingZoneMgs')))]",
             "type": "Microsoft.Management/managementGroups",
-            "apiVersion": "2020-05-01",
+            "apiVersion": "2023-04-01",
             "name": "[concat(parameters('topLevelManagementGroupPrefix'), '-', parameters('landingZoneMgs')[copyIndex()])]",
             "dependsOn": [
                 "[tenantResourceId('Microsoft.Management/managementGroups/', variables('enterpriseScaleManagementGroups').landingZone)]"