Enable ARM debug detail separately for nested deployments

Source facts

Microsoft documents separate debug controls for a main ARM deployment and its nested template. Enabling DeploymentDebugLogLevel on the command populates the main deployment’s request and response properties. The nested deployment requires its own debugSetting; collecting both requires configuring both locations. Microsoft Learn.

Applicability

Use this review when troubleshooting a specific ARM nested-template failure whose required request details are missing. Identify the main and nested deployment names and confirm that collecting payload detail is justified. These records should be treated as potentially sensitive troubleshooting material.

DSE recommendation

DSE recommends obtaining the application owner’s approval for narrowly scoped debug collection. Identify which deployment needs additional evidence, limit access to that evidence and define its disposal step before rerunning. Prefer a sanitized reproduction where feasible. Avoid enabling request-body capture across unrelated deployments simply to find one nested failure.

Verification

After the approved diagnostic run, inspect the named main and nested operations independently. Confirm that the expected request and response properties are available at the intended level and relate to the failed operation. Extract a sanitized explanation of the error, then complete the agreed cleanup of debug history. Retain the corrective change without retaining unnecessary payload secrets.

Official references

Microsoft Learn: Enable debug logging.