#OpenAI Policy Exemption

1 messages · Page 1 of 1 (latest)

void island
#

My organization has a policy 'Keep all data in country X'. This is a pretty simple Azure Policy, stating that resourcegroups and resources can only be created in a specific region.

Now we would like to deploy Azure OpenAI, which only has it's advanced models availible in Sweden (for EU). So I would like to create a policy exemption to allow this specific resource to be created in Sweden Central.

I cannot figure out what to define in the resource selector. I have searched for OpenAI, Azure AI and generic 'name' value. See the attached screenshot.

Obligatory I have read the documentation and searched online but I am at a miss. Could it be that these resource selectors are not added yet to this list?

Bonus question: it says on the create exemption page to look at the Policy pricing pace. There however I do not see any costs related to creating exemptions. So... what's this gonna cost me?

Much thanks - your help truly is appreciated!

azurepolicyexemption.png
hot hound
#

OpenAi I belive is considered a cognitive services resource, hold on adn I can confirm in my tenant

#

Yeah 'Microsoft.CognitiveServices/accounts'

#

Unless I'm very off base, Azure Policy and exemptions do not incur a cost. I'm wondering if that warning is in place in case you have policies set that are related to cost control?

void island
#

Thank you for your response!

#

Unfortunatley, I can alsno not find a Microsoft.CognitiveServices as ResourceType 😦

rugged obsidian
#

I'd suggest editing the policy manually to have the type set to Microsoft.CognitiveServices/accounts

void island
#

This is what I am trying. However that type does not show up at all in the resourceType selector

#

Are the Cognetive services not yet added? Possibly because they are also behind a manual verification

#

(Which I completed, of course)

#

Thanks!

hot hound
#

If I type in "Cog" nothing comes up, but if you type in "accounts" and scroll down it looks like you can find it

#

I've never realized how dumb the search function is for those resourceType selectors in Azure Policy, looks like you can only search by sub-properties instead of the resource types themselves. FWIW, this is just another example of why managing Policies with IaC is important.

void island
#

Super! You're the man! What is even worse, is that the dropdown is formatted different on browsers and OS. In my case, I see the full name 'Microsoft.CognitiveServices/Account' in the dropdown on multiple devices. But as you pointed out, that part is not searchable.

#

When using IaC, can you specify wildcards for the suffixes?

#

I had selected the 'Solved' tag for this post, but it seems prematureley. I created the exception with all items in that group, for the location Sweden Central. However, creation of Azuren OpenAI is still stopped by the policy. (The Policy simply stating all resources must be in EU North)

#

The Policy:

#

I do not find the exact name of the resource in this list, Microsoft.CognitiveServicesOpenAI, but perhaps that is to be expected

#

Ah I think I found it. I have an identical Policy for resource groups. That is the one hitting (or hitting first, need to tinker more)

#

When you create a resource group trough the create resource screen, it gets a default location of West US

#

However, when creating a Resource Group manually, I can indeed select the location by hand, but then it is not tied to the resourceType for which we created an exception

#

Seems to be a Catch-22 there