Resource 'vnet-eastus2-1' was disallowed by policy. (Code: RequestDisallowedByPolicy, Policy(s): Not allowed resource types Policy link (Reason: As per security policy this is Not Allowed Resource, please connect with Cloud Team.))

RequestDisallowedByPolicy means the virtual network deployment is being blocked by an Azure Policy assignment in the environment. In this case, the blocking policy is Not allowed resource types, which is used to deny creation of specific resource types.

What this means:

1. The subscription, management group, or resource group has a policy assignment that disallows the resource type being deployed.
2. Azure blocks the deployment when the resource doesn't comply with that policy.
3. The error message includes the policy assignment name and policy definition so the blocking rule can be identified.

What to do next:

1. In Azure portal, go to Policy.
2. Open Assignments and locate the assignment named Not allowed resource types.
3. Open the assignment and review the Parameters to see which resource types are disallowed.
4. If a virtual network resource type is disallowed, either:
   • deploy a different resource that complies with policy, or
   • have the policy assignment updated by the team that manages Azure Policy in the environment.
5. If an exception is intended for a lower scope, an exemption can be created for that subscope.

If command-line inspection is preferred, the policy details can be checked with:

az policy definition show --name {policy-name}
az policy assignment show --name {assignment-name} --resource-group {resource-group-name}

If the policy is centrally managed and the message says to contact the Cloud Team, the required action is for that team to review the assignment or create an exemption. This is not a deployment error in the virtual network itself; it is a governance restriction.

References:

• Resolve errors for request disallowed by policy
• Tutorial: Disallow resource types in your cloud environment