Pure chaos with policies and repositories. Help me to clarify

[ncseffai]

Hello,

I am trying to figure it out how to use the policies and initiatives and maybe its only me, but I just can't fully grasp how to use it, what is the latest version and which source is the single source of truth.

We have 3 repos

1. https://github.com/Azure/Enterprise-Scale/tree/main
2. https://github.com/Azure/Azure-Landing-Zones/tree/main
3. https://github.com/Azure/Azure-Landing-Zones-Library/blob/main

The Enterprise-Scale repo has initiatives and policy definitions and assignment files. However it says they are moving the documentation to the https://azure.github.io/Azure-Landing-Zones website. Now if you check the Policy section there, there is an excel file that has the initiatives/policies and they assignment files. But this is pointing back to the Enterprise-Scale repo.

First problem:
Some of the assignment files listed in the Excel cannot be found. Here is the list:
- DENYACTION-ResourceDeletionPolicyAssignment.json
- DINE-AksPolicyPolicyAssignment.json
- DINE-ConnectivityAssignment.json
- DINE-IdentityAssignment.json
- DINE-LandingZoneAssignment.json
- DINE-ManagementAssignment.json
- DINE-ServiceHealthAssignment.json

Is the excel file outdate or what?

Second problem
Some initiatives listed in the Excel file - mostly ALZ Workload specific - (e.g. Enforce-Guardrails-OpenAI) are referencing custom policies which cannot be found in the Enterprise-Scale repo!

For example the above mentioned Enforce-Guardrails-OpenAI
"policyDefinitionId": "/providers/Microsoft.Management/managementGroups/contoso/providers/Microsoft.Authorization/policyDefinitions/Deny-CognitiveServices-NetworkAcls", "policyDefinitionReferenceId": "Deny-OpenAi-NetworkAcls"
This definition is in the Azure-Landing-Zones-Library repo under "platform/alz/policy_definitions/Deny-CognitiveServices-NetworkAcls.alz_policy_definition.json"

Third probelm
The Azure-Landing-Zones-Library also have most of these initiatives and policies and also assignment files. Which one is the correct one?

### Things to clarify

1. Should I use the Enterprise-Scale? But then some policy definitions are missing.
2. Should I use the Azure-Landing-Zones-Library? In that case this excel file why does it point to the Enterprise-Scale repo? And which assignment files should I use? Enterprise-Scale or Azure-Landing-Zones-Library?
3. What is the difference between Azure-Landing-Zones and Azure-Landing-Zones-Libraries repo?