{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-524-give-deployment-stack-what-if-result-resources-an-explicit-retention-owner/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260909-524-give-deployment-stack-what-if-result-resources-an-explicit-retention-owner/", "slug": "dse-20260909-524-give-deployment-stack-what-if-result-resources-an-explicit-retention-owner", "url": "https://update.dsesecurity.com/updates/dse-20260909-524-give-deployment-stack-what-if-result-resources-an-explicit-retention-owner/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260909-524-give-deployment-stack-what-if-result-resources-an-explicit-retention-owner.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-524-give-deployment-stack-what-if-result-resources-an-explicit-retention-owner/" }, "title": "Give deployment-stack what-if result resources an explicit retention owner", "summary": "Stack previews do not alter existing resources, but their stored result is a separate resource that counts against scope limits.", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "managed-it", "label": "Managed IT operations", "alt": "A controlled technology lifecycle progressing from assessment to approved production.", "card_url": "https://update.dsesecurity.com/assets/editorial/managed-it-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/managed-it-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "cybersecurity", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" }, { "slug": "networks-infrastructure", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-10T00:23:12+00:00", "modified_at": "2026-09-10T02:11:18+00:00", "reviewed_on": "2026-09-09", "reading_minutes": 2, "word_count": 231, "potentially_affected": "Automation creating stored Azure deployment-stack what-if results.", "dse_recommendation": "Track the result resource separately from the stack and choose a deliberate retention and cleanup policy.", "primary_source": { "name": "Preview deployment stack changes with what-if - Azure Resource Manager | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deployment-stacks-what-if", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

Deployment-stack what-if previews changes without modifying existing resources. It creates a separate Microsoft.Resources/deploymentStacksWhatIfResults resource that references the stack, has its own name and can be retrieved or deleted independently.

\n

Stored results count toward resource limits at their scope. Microsoft recommends a retention interval of PT3H or less; results configured for longer intervals are not automatically deleted and require explicit cleanup when no longer needed. Microsoft Learn.

\n

Applicability

\n

Identify the stack, result-resource scope, intended audit retention and frequency of preview runs. Keep a result’s identifier separate from the stack identifier so retention operations cannot target the wrong object.

\n

DSE recommendation

\n

DSE recommends assigning ownership for preview evidence and its lifecycle in the deployment workflow. Retain the result needed to support an approval according to the organization’s evidence policy, and define safe cleanup of obsolete result resources. Do not describe preview execution as leaving no managed artifact merely because the proposed resource changes were not applied.

\n

Verification

\n

Run an approved preview and inspect the named result resource, its referenced stack and retention interval. Confirm the workflow can retrieve the intended evidence and that any cleanup action targets only approved result resources. For a longer retention choice, verify explicit cleanup handling rather than assuming the interval guarantees deletion. Preserve the approval linkage before removing material evidence.

\n

Official references

\n

Microsoft Learn: Preview deployment stack changes with what-if. Source retrieved September 9, 2026.

", "content_text": "Source facts\nDeployment-stack what-if previews changes without modifying existing resources. It creates a separate Microsoft.Resources/deploymentStacksWhatIfResults resource that references the stack, has its own name and can be retrieved or deleted independently.\nStored results count toward resource limits at their scope. Microsoft recommends a retention interval of PT3H or less; results configured for longer intervals are not automatically deleted and require explicit cleanup when no longer needed. Microsoft Learn.\nApplicability\nIdentify the stack, result-resource scope, intended audit retention and frequency of preview runs. Keep a result’s identifier separate from the stack identifier so retention operations cannot target the wrong object.\nDSE recommendation\nDSE recommends assigning ownership for preview evidence and its lifecycle in the deployment workflow. Retain the result needed to support an approval according to the organization’s evidence policy, and define safe cleanup of obsolete result resources. Do not describe preview execution as leaving no managed artifact merely because the proposed resource changes were not applied.\nVerification\nRun an approved preview and inspect the named result resource, its referenced stack and retention interval. Confirm the workflow can retrieve the intended evidence and that any cleanup action targets only approved result resources. For a longer retention choice, verify explicit cleanup handling rather than assuming the interval guarantees deletion. Preserve the approval linkage before removing material evidence.\nOfficial references\nMicrosoft Learn: Preview deployment stack changes with what-if. Source retrieved September 9, 2026.", "content_markdown": "## Source facts\n\nDeployment-stack what-if previews changes without modifying existing resources. It creates a separate Microsoft.Resources/deploymentStacksWhatIfResults resource that references the stack, has its own name and can be retrieved or deleted independently.\n\nStored results count toward resource limits at their scope. Microsoft recommends a retention interval of PT3H or less; results configured for longer intervals are not automatically deleted and require explicit cleanup when no longer needed. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deployment-stacks-what-if).\n\n## Applicability\n\nIdentify the stack, result-resource scope, intended audit retention and frequency of preview runs. Keep a result’s identifier separate from the stack identifier so retention operations cannot target the wrong object.\n\n## DSE recommendation\n\nDSE recommends assigning ownership for preview evidence and its lifecycle in the deployment workflow. Retain the result needed to support an approval according to the organization’s evidence policy, and define safe cleanup of obsolete result resources. Do not describe preview execution as leaving no managed artifact merely because the proposed resource changes were not applied.\n\n## Verification\n\nRun an approved preview and inspect the named result resource, its referenced stack and retention interval. Confirm the workflow can retrieve the intended evidence and that any cleanup action targets only approved result resources. For a longer retention choice, verify explicit cleanup handling rather than assuming the interval guarantees deletion. Preserve the approval linkage before removing material evidence.\n\n## Official references\n\n[Microsoft Learn: Preview deployment stack changes with what-if](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deployment-stacks-what-if). Source retrieved September 9, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260909-524-give-deployment-stack-what-if-result-resources-an-explicit-retention-owner/", "url": "https://update.dsesecurity.com/updates/dse-20260909-524-give-deployment-stack-what-if-result-resources-an-explicit-retention-owner/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-09" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260909-524-give-deployment-stack-what-if-result-resources-an-explicit-retention-owner/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Give deployment-stack what-if result resources an explicit retention owner", "item": "https://update.dsesecurity.com/updates/dse-20260909-524-give-deployment-stack-what-if-result-resources-an-explicit-retention-owner/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260909-524-give-deployment-stack-what-if-result-resources-an-explicit-retention-owner/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260909-524-give-deployment-stack-what-if-result-resources-an-explicit-retention-owner/", "url": "https://update.dsesecurity.com/updates/dse-20260909-524-give-deployment-stack-what-if-result-resources-an-explicit-retention-owner/", "headline": "Give deployment-stack what-if result resources an explicit retention owner", "description": "Stack previews do not alter existing resources, but their stored result is a separate resource that counts against scope limits.", "abstract": "Stack previews do not alter existing resources, but their stored result is a separate resource that counts against scope limits.", "articleBody": "Source facts\nDeployment-stack what-if previews changes without modifying existing resources. It creates a separate Microsoft.Resources/deploymentStacksWhatIfResults resource that references the stack, has its own name and can be retrieved or deleted independently.\nStored results count toward resource limits at their scope. Microsoft recommends a retention interval of PT3H or less; results configured for longer intervals are not automatically deleted and require explicit cleanup when no longer needed. Microsoft Learn.\nApplicability\nIdentify the stack, result-resource scope, intended audit retention and frequency of preview runs. Keep a result’s identifier separate from the stack identifier so retention operations cannot target the wrong object.\nDSE recommendation\nDSE recommends assigning ownership for preview evidence and its lifecycle in the deployment workflow. Retain the result needed to support an approval according to the organization’s evidence policy, and define safe cleanup of obsolete result resources. Do not describe preview execution as leaving no managed artifact merely because the proposed resource changes were not applied.\nVerification\nRun an approved preview and inspect the named result resource, its referenced stack and retention interval. Confirm the workflow can retrieve the intended evidence and that any cleanup action targets only approved result resources. For a longer retention choice, verify explicit cleanup handling rather than assuming the interval guarantees deletion. Preserve the approval linkage before removing material evidence.\nOfficial references\nMicrosoft Learn: Preview deployment stack changes with what-if. Source retrieved September 9, 2026.", "datePublished": "2026-09-10T00:23:12+00:00", "dateModified": "2026-09-10T02:11:18+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260909-524-give-deployment-stack-what-if-result-resources-an-explicit-retention-owner/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260909-524-give-deployment-stack-what-if-result-resources-an-explicit-retention-owner/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Give deployment-stack what-if result resources an explicit retention owner" }, "articleSection": [ "Cybersecurity", "Networks & Infrastructure" ], "keywords": [ "Cybersecurity", "Networks & Infrastructure", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" }, { "@type": "Thing", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "wordCount": 231, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Preview deployment stack changes with what-if - Azure Resource Manager | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deployment-stacks-what-if" } } ] } }