Option to create a landing zone management group for brownfield subscriptions

[simonhutson]

Describe the feature end to end, including deployment scenario details under which the feature would occur.

The following document describes an example approach that transitions an environment to the Azure landing zone conceptual architecture by duplicating the landing zone management group with policies in audit only mode. With this approach, you can quickly access the new desired target architecture and then assess the application or workload subscriptions for compliance. This approach eliminates the risk of affecting the application teams because the policies are in audit only mode.

https://learn.microsoft.com/azure/cloud-adoption-framework/ready/landing-zone/align-approach-duplicate-brownfield-audit-only

It would be useful to have an option to deploy a brownfield landing zone management group and policies as part of the standard Bicep deployment.

Why is this feature important. Describe why this would be important for your organization and others. Would this impact similar orgs in the same way?

Increasing numbers of customers have previously deployed Azure and are now looking to adopt infrastructure as code and ALZ best practices. A brownfield management group option would accelerate their migrations.

Please provide the correlation id associated with your error or bug.

xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Can you describe any alternatives that you have taken since this feature does not exist?

No response

Feature Implementation

No response

Check previous GitHub issues

• I have searched the issues for this item and found no duplicate

Code of Conduct

• I agree to follow this project's Code of Conduct

[oZakari]

Hi @simonhutson, I agree that this is a valid ask. Probably not something we will get to in the near term, but will add to the backlog and consider our options.