Creation of AKS cluster is prevented by policy.

Hello IniobongNkanga-8038, it seems that the creation of your AKS cluster is being blocked by a specific policy. There are a couple of ways in which you can resolve this.

1. Find the Policy - The error message lists the Azure policy that is blocking the action. Look for the specific policy that disallows the resource "aks-agentpool-19603827-vmss". You should be able to find this information in the error message itself
2. Policy limitations - Review the limitations of the policy. If possible, adjust your deployment to meet the policy's requirements. Sometimes, changing the configuration or settings can resolve the issue
3. Exception or Disable - Depending on your situation, you can also
   1. Add an Exception - If you need to create the resource despite the policy, consider adding an exception to the policy specifically for this resource
   2. Disable the Policy - If the policy is too restrictive and doesn't align with your requirements, you can disable it. However, be cautious while doing this, as it might impact compliance

Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

@IniobongNkanga-8038

Please refer to these documents and see if this helps.

1. Add an exception to the policy.
2. Disable the policy.

To get details about the policy that blocked your cluster deployment operation, see RequestDisallowedByPolicy error with Azure resource policy.

To resolve the RequestDisallowedByPolicy error when deploying an ARM template or Bicep file, you need to find which policy is blocking the deployment. Within that policy, you need to review the rules so you can update your deployment to comply with the policy.

The error message includes the names of the policy definition and policy assignment that caused the error. You need these names to get more information about the policy.

• Azure CLI
• PowerShell

To get more information about a policy definition, use az policy definition show.

az policy definition show --name

To get more information about a policy assignment, use az policy assignment show.

az policy assignment show --name

Within the policy definition, you see a description of the policy and the rules that are applied. Review the rules and update your ARM template or Bicep file to comply with the rules. For example, if the rule states the public network access is disabled, you need to update the corresponding resource properties.

Let me know in the comments if this doesn't help and I can involve the right teams for investigation.

Thanks.