创建API管理服务时出错 [英] Error in creating API management service

问题描述

我按照教程"创建API网关"进行操作。当我尝试通过执行以下步骤创建api管理服务资源时，门户网站返回错误：



1-登录Azure门户 使用相同的帐户激活沙箱。



2-在左侧菜单中，单击+创建资源。



3-单击"集成"，然后单击"API管理"。



4-在API Management服务页面中，输入详细信息。



** 5 ** - 当我点击创建时，我收到以下错误。





{"telemetryId"："409db97b-75c9-43e4-906d-db0ef51dc0e5"，"bladeInstanceId"："Blade_a57987768d2140aea7ce5caeeeeab3e3_3_0"，"galleryItemId"："Microsoft.ApiManagement"，"createBlade"：" CreateServiceBlade"，" code"：" InvalidTemplateDeployment"，" message"："
模板部署因策略违规而失败。有关详细信息，请参阅详细信息。"，"详细信息"：[{" code"："RequestDisallowedByPolicy"，"target"："apim-NorthWindShoes346878645"，"message"：" b'apim-NorthWindShoes346878645'被政策禁止。 （代码：RequestDisallowedByPolicy）"，" additionalInfo"：[{"类型"：" PolicyViolation"，"信息"：{" policyDefinitionDisplayName"："允许资源类型"，" policySetDefinitionDisplayName"：" web应用"，" evaluationDetails"：{" evaluatedExpressions"：[{"导致"："假QUOT;，"表达"："类型"，"路径"："类型"，" expressionValue" ：" Microsoft.ApiManagement /服务"，" targetValue"：[" Microsoft.Resources / resourceGroups"，" Microsoft.Storage/storageAccounts"，" Microsoft.Web /网站及QUOT;，" Microsoft.Web / serverFarms" ;，" Microsoft.Web /功能"，" Microsoft.DocumentDB / databaseAccounts"，" microsoft.insights /组件"，" Microsoft.KeyVault /拱顶"，" Microsoft.Cache / Redis的"，"微软.ServiceBus /命名空间"，" Microsoft.ServiceBus /命名空间/ authorizatio nrules"，" Microsoft.ServiceBus /命名空间/队列"，" Microsoft.ServiceBus /命名空间/队列/ authorizationrules"，" Microsoft.ServiceBus /命名空间/主题"，" Microsoft.ServiceBus /命名空间/主题/ authorizationrules" ，" Microsoft.ServiceBus /命名空间/主题/订阅"，" Microsoft.ServiceBus /命名空间/主题/订阅/规则"，" Microsoft.CognitiveServices /帐户"，" Microsoft.Web /位点/槽"，" ; Microsoft.Web /位点/槽/实例"，" Microsoft.Web /位点/槽/度量"，" Microsoft.Web /位点/度量"，" Microsoft.Web /位点/实例"，"微软名.web /证书"，" Microsoft.Portal /仪表板"，" Microsoft.ContainerRegistry /登记"，" Microsoft.ContainerRegistry /注册/网络挂接"，" Microsoft.Web /连接"，" Microsoft.Logic /工作流程"，" Microsoft.Web / customApis"，" Microsoft.Search/searchServices" ，" Microsoft.Network/trafficmanagerprofiles"，" Microsoft.Sql /服务器"，" Microsoft.Sql /服务器/数据库"，" Microsoft.SignalRService / SignalR"]，"运营商QUOT;："在"} ]}，" policyDefinitionId"：" /providers/Microsoft.Authorization/policyDefinitions/a08ec900-254a-4555-9bf5-e42af04b5c5c"，" policySetDefinitionId"：" /providers/Microsoft.Management/managementGroups/triplecrown2/providers/ Microsoft.Authorization / policySetDefinitions / f06460e7-86f9-42ad-8955-fb55bad92028"，" policyDefinitionReferenceId"：" 8272972042953317437"，" policySetDefinitionName"：" f06460e7-86f9-42ad-8955-fb55bad92028"，" policyDefinitionName" ;: " a08ec900-254a-4555-9bf5-e42af04b5c5c"，" policyDefinitionEffect"："拒绝"，" policyAssignmentId"：" /订阅/<订阅-ID> / resourceGroups /<种源-组> /提供商/Microsoft.Authorization/policyAssign发言：/ TripleCrownPolicy"，" policyAssignmentName"：" TripleCrownPolicy"，" policyAssignmentDisplayName"："沙箱
政策与QUOT;，" policyAssignmentScope"：" /订阅/<订阅-ID> / resourceGroups /< ;种源-组>"}}，{"类型"：" PolicyViolation"，"信息"：{" policyDefinitionDisplayName"："允许资源
类型"，" policySetDefinitionDisplayName"：" web应用"，" evaluationDetails"：{" evaluatedExpressions"：[{"导致"："假QUOT;，"表达"："类型"，"路径"："类型"，" expressionValue" ：" Microsoft.ApiManagement /服务"，" targetValue"：[" Microsoft.Resources / resourceGroups"，" Microsoft.Storage/storageAccounts"，" Microsoft.Web /网站及QUOT;，" Microsoft.Web / serverFarms" ;，" Microsoft.Web /功能"，" Microsoft.DocumentDB / DAT abaseAccounts"，" microsoft.insights /组件"，" Microsoft.KeyVault /拱顶"，" Microsoft.Cache / Redis的"，" Microsoft.ServiceBus /命名空间"，" Microsoft.ServiceBus /命名空间/ authorizationrules" ;, " Microsoft.ServiceBus /命名空间/队列"，" Microsoft.ServiceBus /命名空间/队列/ authorizationrules"，" Microsoft.ServiceBus /命名空间/主题"，" Microsoft.ServiceBus /命名空间/主题/ authorizationrules"，" Microsoft.ServiceBus /命名空间/主题/订阅"，" Microsoft.ServiceBus /命名空间/主题/订阅/规则"，" Microsoft.CognitiveServices /账户"，" Microsoft.Web /网站/插槽"，"微软。网络/位点/槽/实例"，" Microsoft.Web /位点/槽/度量"，" Microsoft.Web /位点/度量"，" Microsoft.Web /位点/实例"，" Microsoft.Web /证书"，" Microsoft.Portal /仪表板"，" Microsoft.ContainerRegistry /吉斯尝试"，" Microsoft.ContainerRegistry /注册/网络挂接"，" Microsoft.Web /连接"，" Microsoft.Logic /工作流程"，" Microsoft.Web / customApis"，" Microsoft.Search/searchServices" ;, " Microsoft.Network/trafficmanagerprofiles"，" Microsoft.Sql /服务器"，" Microsoft.Sql /服务器/数据库"，" Microsoft.SignalRService / SignalR"]，"运营商QUOT;："在"}] }，" policyDefinitionId"：" /providers/Microsoft.Authorization/policyDefinitions/a08ec900-254a-4555-9bf5-e42af04b5c5c"，" policySetDefinitionId"：" /providers/Microsoft.Management/managementGroups/triplecrown2/providers/Microsoft .Authorization / policySetDefinitions / f06460e7-86f9-42ad-8955-fb55bad92028"，" policyDefinitionReferenceId"：" 8272972042953317437"，" policySetDefinitionName"：" f06460e7-86f9-42ad-8955-fb55bad92028"，" policyDefinitionName"：" ; a08ec900-254a-4555-9bf5-E4 2af04b5c5c"，" policyDefinitionEffect"："拒绝"，" policyAssignmentId"：" /providers/Microsoft.Management/managementGroups/triplecrown2/providers/Microsoft.Authorization/policyAssignments/4a0a4629d22043e6a70a69f9"，" policyAssignmentName"：" 4a0a4629d22043e6a70a69f9" ;，" policyAssignmentDisplayName"：" web应用"，" policyAssignmentScope"：" /providers/Microsoft.Management/managementGroups/triplecrown2"，" policyAssignmentParameters"：{}}}]，" policyDetails"：[{" ; isInitiative"：真，" assignmentId"：" /订阅/<订阅-ID> / resourceGroups /<种源-组> /providers/Microsoft.Authorization/policyAssignments/TripleCrownPolicy"，" assignmentName"：" Sandbox
Policy"，auxDefinitionNames"：[" Allowed resources types"]，" viewDetailsUri"：" https：//portal.azure.com#blade/Microsoft_Azure_Policy/EditAssignm entBlade / ID /％2Fsubscriptions％2F<订阅-ID>％2FresourceGroups％2F<种源-组>％2Fproviders％2FMicrosoft.Authorization％2FpolicyAssignments％2FTripleCrownPolicy"}，{" isInitiative"：真，" assignmentId"：" /providers/Microsoft.Management/managementGroups/triplecrown2/providers/Microsoft.Authorization/policyAssignments/4a0a4629d22043e6a70a69f9","assignmentName":"webapp","auxDefinitionNames":["Allowed
resource types"]， " viewDetailsUri"：" HTTPS：//portal.azure.com#blade/Microsoft_Azure_Policy/EditAssignmentBlade/id/%2Fproviders%2FMicrosoft.Management%2FmanagementGroups%2Ftriplecrown2%2Fproviders%2FMicrosoft.Authorization%2FpolicyAssignments%2F4a0a4629d22043e6a70a69f9"}]}] }

I am following the tutorial to "create an API gateway". The portal returns the an error when I try to create an api management service resource by doing the below steps:

1- Sign into the Azure portal  using the same account you activated the sandbox with.

2- In the left menu, click + Create a resource.

3- Click Integration, and then click API management.

4- In the API Management service page, enter the details.

**5** - When I click on create I get the following error.


{"telemetryId":"409db97b-75c9-43e4-906d-db0ef51dc0e5","bladeInstanceId":"Blade_a57987768d2140aea7ce5caeeeeab3e3_3_0","galleryItemId":"Microsoft.ApiManagement","createBlade":"CreateServiceBlade","code":"InvalidTemplateDeployment","message":"The template deployment failed because of policy violation. Please see details for more information.","details":[{"code":"RequestDisallowedByPolicy","target":"apim-NorthWindShoes346878645","message":"Resource 'apim-NorthWindShoes346878645' was disallowed by policy. (Code: RequestDisallowedByPolicy)","additionalInfo":[{"type":"PolicyViolation","info":{"policyDefinitionDisplayName":"Allowed resource types","policySetDefinitionDisplayName":"webapp","evaluationDetails":{"evaluatedExpressions":[{"result":"False","expression":"type","path":"type","expressionValue":"Microsoft.ApiManagement/service","targetValue":["Microsoft.Resources/resourceGroups","Microsoft.Storage/storageAccounts","Microsoft.Web/sites","Microsoft.Web/serverFarms","Microsoft.Web/functions","Microsoft.DocumentDB/databaseAccounts","microsoft.insights/components","Microsoft.KeyVault/vaults","Microsoft.Cache/Redis","Microsoft.ServiceBus/namespaces","Microsoft.ServiceBus/namespaces/authorizationrules","Microsoft.ServiceBus/namespaces/queues","Microsoft.ServiceBus/namespaces/queues/authorizationrules","Microsoft.ServiceBus/namespaces/topics","Microsoft.ServiceBus/namespaces/topics/authorizationrules","Microsoft.ServiceBus/namespaces/topics/subscriptions","Microsoft.ServiceBus/namespaces/topics/subscriptions/rules","Microsoft.CognitiveServices/accounts","Microsoft.Web/sites/slots","Microsoft.Web/sites/slots/instances","Microsoft.Web/sites/slots/metrics","Microsoft.Web/sites/metrics","Microsoft.Web/sites/instances","Microsoft.Web/certificates","Microsoft.Portal/dashboards","Microsoft.ContainerRegistry/registries","Microsoft.ContainerRegistry/registries/webhooks","Microsoft.Web/connections","Microsoft.Logic/workflows","Microsoft.Web/customApis","Microsoft.Search/searchServices","Microsoft.Network/trafficmanagerprofiles","Microsoft.Sql/servers","Microsoft.Sql/servers/databases","Microsoft.SignalRService/SignalR"],"operator":"In"}]},"policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a08ec900-254a-4555-9bf5-e42af04b5c5c","policySetDefinitionId":"/providers/Microsoft.Management/managementGroups/triplecrown2/providers/Microsoft.Authorization/policySetDefinitions/f06460e7-86f9-42ad-8955-fb55bad92028","policyDefinitionReferenceId":"8272972042953317437","policySetDefinitionName":"f06460e7-86f9-42ad-8955-fb55bad92028","policyDefinitionName":"a08ec900-254a-4555-9bf5-e42af04b5c5c","policyDefinitionEffect":"deny","policyAssignmentId":"/subscriptions/<subscription-id>/resourceGroups/<resouce-group>/providers/Microsoft.Authorization/policyAssignments/TripleCrownPolicy","policyAssignmentName":"TripleCrownPolicy","policyAssignmentDisplayName":"Sandbox Policy","policyAssignmentScope":"/subscriptions/<subscription-id>/resourceGroups/<resouce-group>"}},{"type":"PolicyViolation","info":{"policyDefinitionDisplayName":"Allowed resource types","policySetDefinitionDisplayName":"webapp","evaluationDetails":{"evaluatedExpressions":[{"result":"False","expression":"type","path":"type","expressionValue":"Microsoft.ApiManagement/service","targetValue":["Microsoft.Resources/resourceGroups","Microsoft.Storage/storageAccounts","Microsoft.Web/sites","Microsoft.Web/serverFarms","Microsoft.Web/functions","Microsoft.DocumentDB/databaseAccounts","microsoft.insights/components","Microsoft.KeyVault/vaults","Microsoft.Cache/Redis","Microsoft.ServiceBus/namespaces","Microsoft.ServiceBus/namespaces/authorizationrules","Microsoft.ServiceBus/namespaces/queues","Microsoft.ServiceBus/namespaces/queues/authorizationrules","Microsoft.ServiceBus/namespaces/topics","Microsoft.ServiceBus/namespaces/topics/authorizationrules","Microsoft.ServiceBus/namespaces/topics/subscriptions","Microsoft.ServiceBus/namespaces/topics/subscriptions/rules","Microsoft.CognitiveServices/accounts","Microsoft.Web/sites/slots","Microsoft.Web/sites/slots/instances","Microsoft.Web/sites/slots/metrics","Microsoft.Web/sites/metrics","Microsoft.Web/sites/instances","Microsoft.Web/certificates","Microsoft.Portal/dashboards","Microsoft.ContainerRegistry/registries","Microsoft.ContainerRegistry/registries/webhooks","Microsoft.Web/connections","Microsoft.Logic/workflows","Microsoft.Web/customApis","Microsoft.Search/searchServices","Microsoft.Network/trafficmanagerprofiles","Microsoft.Sql/servers","Microsoft.Sql/servers/databases","Microsoft.SignalRService/SignalR"],"operator":"In"}]},"policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a08ec900-254a-4555-9bf5-e42af04b5c5c","policySetDefinitionId":"/providers/Microsoft.Management/managementGroups/triplecrown2/providers/Microsoft.Authorization/policySetDefinitions/f06460e7-86f9-42ad-8955-fb55bad92028","policyDefinitionReferenceId":"8272972042953317437","policySetDefinitionName":"f06460e7-86f9-42ad-8955-fb55bad92028","policyDefinitionName":"a08ec900-254a-4555-9bf5-e42af04b5c5c","policyDefinitionEffect":"deny","policyAssignmentId":"/providers/Microsoft.Management/managementGroups/triplecrown2/providers/Microsoft.Authorization/policyAssignments/4a0a4629d22043e6a70a69f9","policyAssignmentName":"4a0a4629d22043e6a70a69f9","policyAssignmentDisplayName":"webapp","policyAssignmentScope":"/providers/Microsoft.Management/managementGroups/triplecrown2","policyAssignmentParameters":{}}}],"policyDetails":[{"isInitiative":true,"assignmentId":"/subscriptions/<subscription-id>/resourceGroups/<resouce-group>/providers/Microsoft.Authorization/policyAssignments/TripleCrownPolicy","assignmentName":"Sandbox Policy","auxDefinitionNames":["Allowed resource types"],"viewDetailsUri":"https://portal.azure.com#blade/Microsoft_Azure_Policy/EditAssignmentBlade/id/%2Fsubscriptions%2F<subscription-id>%2FresourceGroups%2F<resouce-group>%2Fproviders%2FMicrosoft.Authorization%2FpolicyAssignments%2FTripleCrownPolicy"},{"isInitiative":true,"assignmentId":"/providers/Microsoft.Management/managementGroups/triplecrown2/providers/Microsoft.Authorization/policyAssignments/4a0a4629d22043e6a70a69f9","assignmentName":"webapp","auxDefinitionNames":["Allowed resource types"],"viewDetailsUri":"https://portal.azure.com#blade/Microsoft_Azure_Policy/EditAssignmentBlade/id/%2Fproviders%2FMicrosoft.Management%2FmanagementGroups%2Ftriplecrown2%2Fproviders%2FMicrosoft.Authorization%2FpolicyAssignments%2F4a0a4629d22043e6a70a69f9"}]}]}

推荐答案

您正在点击自定义Azure政策违规。

You are hitting an Custom Azure Policy violation.

您必须将"Microsoft.ApiManagement / service"添加到"Allo"资源类型"政策，然后它应该按预期工作。

You have to add 'Microsoft.ApiManagement/service' to the "Allowed resource types" policy and then it should work as expected.

这篇关于创建API管理服务时出错的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！