CMMC 2.0 Level 2 (4e50fd13-098b-3206-61d6-d1d78205cb45) PolicySet - incorrect additionalMetadataId value

[JulianHayward]

the additionalMetadataId value under the key policyDefinitionGroups is incorrect, _L2 after CMMC_2.0 needs to be removed in order to retrieve positive response, currently returns 404

Example:

is:
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CMMC_2.0_L2_SI.L1-3.14.5
should be:
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CMMC_2.0_SI.L1-3.14.5

The issue seems applicable to all additionalMetadataId values in the PolicySet

Details of the scenario you tried and the problem that is occurring

Getting additional metadata information..

ref:

azure-policy/built-in-policies/policySetDefinitions/Regulatory Compliance/CMMC_2_0_L2.json

Line 439 in 51ac1cd

"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CMMC_2.0_L2_SI.L1-3.14.5"

Verbose logs showing the problem

PS C:\temp> (Invoke-AzRestMethod -Uri "https://management.azure.com/providers/Microsoft.PolicyInsights/policyMetadata/CMMC_2.0_L2_SI.L1-3.14.5?api-version=2019-10-01" -Method 'GET').StatusCode
404

PS C:\temp> (Invoke-AzRestMethod -Uri "https://management.azure.com/providers/Microsoft.PolicyInsights/policyMetadata/CMMC_2.0_SI.L1-3.14.5?api-version=2019-10-01" -Method 'GET').StatusCode
200

Suggested solution to the issue

Remove _L2 after CMMC_2.0 in the value for additionalMetadataId, not sure if the groupNames under the key policyDefinitions require alignment, too..