TFNFR36 - Setting prevent_deletion_if_contains_resources
From Terraform AzureRM 3.0, the default value of prevent_deletion_if_contains_resources
in provider
block is true
. This will lead to an unstable test because the test subscription has some policies applied, and they will add some extra resources during the run, which can cause failures during destroy of resource groups.
Since we cannot guarantee our testing environment won’t be applied some
Azure Policy Remediation Tasks
in the future, for a robust testing environment, prevent_deletion_if_contains_resources
SHOULD be explicitly set to false
.