2024-06-26T05:30:05.

6875282Z ##[error]5:30:05 AM - The deployment 'NSGTemplate'

failed with error(s). Showing 1 out of 1 error(s).
Status Message: Found conflicts with NetworkIntentPolicy. Details: Network Security
Group cannot have resources which conflict with its subnets' network intent
policies.
Network Security Group:
/subscriptions/b05b3068-092e-4925-b0fb-d20816b45c91/resourceGroups/
AG_EMEA_WESTEUROPE_PRD_01_NSG/providers/Microsoft.Network/networkSecurityGroups/
NSG_10.41.96.0_24 conflicts with Network Intent Policy: mi_default_c87fd900-afbb-
4fbe-bc75-6583458f2491_10-41-96-0-24
Network Security Rule Name: Deny_all_other_subnets_tcp, Id:
/subscriptions/b05b3068-092e-4925-b0fb-d20816b45c91/resourceGroups/
AG_EMEA_WESTEUROPE_PRD_01_NSG/providers/Microsoft.Network/networkSecurityGroups/
NSG_10.41.96.0_24/securityRules/Deny_all_other_subnets_tcp, Access: Deny,
Direction: Inbound, Protocol: Tcp, SourceAddressPrefix: *, SourcePortRange: *,
DestinationAddressPrefix: VirtualNetwork, DestinationPortRange: * conflicts with
Network Intent Policy Security Rule: Name: mi-healthprobe-in-10-41-96-0-24-v11,
Id: /subscriptions/b05b3068-092e-4925-b0fb-d20816b45c91/resourceGroups/
AG_EMEA_WESTEUROPE_PRD_01_NRG/providers/Microsoft.Network/networkIntentPolicies/
mi_default_c87fd900-afbb-4fbe-bc75-6583458f2491_10-41-96-0-24/securityRules/mi-
healthprobe-in-10-41-96-0-24-v11, Access: Allow, Direction: Inbound, Protocol: *,
SourceAddressPrefix: AzureLoadBalancer, SourcePortRange: *,
DestinationAddressPrefix: 10.41.96.0/24, DestinationPortRange: *
Network Security Rule Name: Deny_all_other_subnets_udp, Id:
/subscriptions/b05b3068-092e-4925-b0fb-d20816b45c91/resourceGroups/
AG_EMEA_WESTEUROPE_PRD_01_NSG/providers/Microsoft.Network/networkSecurityGroups/
NSG_10.41.96.0_24/securityRules/Deny_all_other_subnets_udp, Access: Deny,
Direction: Inbound, Protocol: Udp, SourceAddressPrefix: *, SourcePortRange: *,
DestinationAddressPrefix: VirtualNetwork, DestinationPortRange: * conflicts with
Network Intent Policy Security Rule: Name: mi-healthprobe-in-10-41-96-0-24-v11,
Id: /subscriptions/b05b3068-092e-4925-b0fb-d20816b45c91/resourceGroups/
AG_EMEA_WESTEUROPE_PRD_01_NRG/providers/Microsoft.Network/networkIntentPolicies/
mi_default_c87fd900-afbb-4fbe-bc75-6583458f2491_10-41-96-0-24/securityRules/mi-
healthprobe-in-10-41-96-0-24-v11, Access: Allow, Direction: Inbound, Protocol: *,
SourceAddressPrefix: AzureLoadBalancer, SourcePortRange: *,
DestinationAddressPrefix: 10.41.96.0/24, DestinationPortRange: *
----
Network Security Group doesn't have supporting Security Rule for Network Intent
Policy Security Rule: Name: mi-internal-in-10-41-96-0-24-v11, Id:
/subscriptions/b05b3068-092e-4925-b0fb-d20816b45c91/resourceGroups/
AG_EMEA_WESTEUROPE_PRD_01_NRG/providers/Microsoft.Network/networkIntentPolicies/
mi_default_c87fd900-afbb-4fbe-bc75-6583458f2491_10-41-96-0-24/securityRules/mi-
internal-in-10-41-96-0-24-v11, Access: Allow, Direction: Inbound, Protocol: *,
SourceAddressPrefix: 10.41.96.0/24, SourcePortRange: *, DestinationAddressPrefix:
10.41.96.0/24, DestinationPortRange: *
----
Network Security Group doesn't have supporting Security Rule for Network Intent
Policy Security Rule: Name: mi-aad-out-10-41-96-0-24-v11, Id:
/subscriptions/b05b3068-092e-4925-b0fb-d20816b45c91/resourceGroups/
AG_EMEA_WESTEUROPE_PRD_01_NRG/providers/Microsoft.Network/networkIntentPolicies/
mi_default_c87fd900-afbb-4fbe-bc75-6583458f2491_10-41-96-0-24/securityRules/mi-aad-
out-10-41-96-0-24-v11, Access: Allow, Direction: Outbound, Protocol: Tcp,
SourceAddressPrefix: 10.41.96.0/24, SourcePortRange: *, DestinationAddressPrefix:
AzureActiveDirectory, DestinationPortRange: 443
----
Network Security Group doesn't have supporting Security Rule for Network Intent
Policy Security Rule: Name: mi-onedsc-out-10-41-96-0-24-v11, Id:
/subscriptions/b05b3068-092e-4925-b0fb-d20816b45c91/resourceGroups/
AG_EMEA_WESTEUROPE_PRD_01_NRG/providers/Microsoft.Network/networkIntentPolicies/
mi_default_c87fd900-afbb-4fbe-bc75-6583458f2491_10-41-96-0-24/securityRules/mi-
onedsc-out-10-41-96-0-24-v11, Access: Allow, Direction: Outbound, Protocol: Tcp,
SourceAddressPrefix: 10.41.96.0/24, SourcePortRange: *, DestinationAddressPrefix:
OneDsCollector, DestinationPortRange: 443
----
Network Security Group doesn't have supporting Security Rule for Network Intent
Policy Security Rule: Name: mi-internal-out-10-41-96-0-24-v11, Id:
/subscriptions/b05b3068-092e-4925-b0fb-d20816b45c91/resourceGroups/
AG_EMEA_WESTEUROPE_PRD_01_NRG/providers/Microsoft.Network/networkIntentPolicies/
mi_default_c87fd900-afbb-4fbe-bc75-6583458f2491_10-41-96-0-24/securityRules/mi-
internal-out-10-41-96-0-24-v11, Access: Allow, Direction: Outbound, Protocol: *,
SourceAddressPrefix: 10.41.96.0/24, SourcePortRange: *, DestinationAddressPrefix:
10.41.96.0/24, DestinationPortRange: *
----
Network Security Group doesn't have supporting Security Rule for Network Intent
Policy Security Rule: Name: mi-strg-p-out-10-41-96-0-24-v11, Id:
/subscriptions/b05b3068-092e-4925-b0fb-d20816b45c91/resourceGroups/
AG_EMEA_WESTEUROPE_PRD_01_NRG/providers/Microsoft.Network/networkIntentPolicies/
mi_default_c87fd900-afbb-4fbe-bc75-6583458f2491_10-41-96-0-24/securityRules/mi-
strg-p-out-10-41-96-0-24-v11, Access: Allow, Direction: Outbound, Protocol: *,
SourceAddressPrefix: 10.41.96.0/24, SourcePortRange: *, DestinationAddressPrefix:
Storage.westeurope, DestinationPortRange: 443
----
Network Security Group doesn't have supporting Security Rule for Network Intent
Policy Security Rule: Name: mi-strg-s-out-10-41-96-0-24-v11, Id:
/subscriptions/b05b3068-092e-4925-b0fb-d20816b45c91/resourceGroups/
AG_EMEA_WESTEUROPE_PRD_01_NRG/providers/Microsoft.Network/networkIntentPolicies/
mi_default_c87fd900-afbb-4fbe-bc75-6583458f2491_10-41-96-0-24/securityRules/mi-
strg-s-out-10-41-96-0-24-v11, Access: Allow, Direction: Outbound, Protocol: *,
SourceAddressPrefix: 10.41.96.0/24, SourcePortRange: *, DestinationAddressPrefix:
Storage.northeurope, DestinationPortRange: 443
----
---- ---- (Code: ConflictWithNetworkIntentPolicy)

CorrelationId: 025ec497-5838-4d28-b8f3-c729214a865d
2024-06-26T05:30:05.7318207Z ##[section]Finishing: AG_EMEA_WESTEUROPE_PRD_01_NSG