Update enforcement mode for Policy "Deploy-UserAssignedManagedIdentity-VMInsights" (#1567)

Author: arjenhuitema

docs/wiki/Whats-new.md

@@ -44,6 +44,7 @@ Here's what's changed in Enterprise Scale/Azure Landing Zones:
 #### Tooling
 
 - Disabled a Policy in the Microsoft Defender for SQL initiative. As it is not required at this stage. See [ALZ AMA FAQ](./ALZ-AMA-FAQ) for more details.
+- Changed enforcementMode of the assignment of Policy "Deploy-UserAssignedManagedIdentity-VMInsights" to Default. This is to ensure that a Resource Group and a User Assigned Managed Identity are created on new subscriptions (subscriptions that are added after the initial deployment).
 
 ### AMA Update for the Portal Accelerator
 

eslzArm/eslzArm.json

@@ -3054,7 +3054,7 @@
                         "value": "[parameters('enterpriseScaleCompanyPrefix')]"
                     },
                     "enforcementMode": {
-                        "value": "DoNotEnforce"
+                        "value": "Default"
                     },
                     "userAssignedManagedIdentityResourceGroup": {
                         "value": "[parameters('userAssignedIdentityResourceGroup')]"

eslzArm/managementGroupTemplates/policyAssignments/DINE-UserAssignedIdentityVMInsightsAssignment.json

@@ -34,7 +34,7 @@
                 "Default",
                 "DoNotEnforce"
             ],
-            "defaultValue": "DoNotEnforce"
+            "defaultValue": "Default"
         },
         "nonComplianceMessagePlaceholder": {
             "type": "string",