我尝试在现有策略中使用azurerm_subscription_policy_remediation，并成功执行了terrafrom_plan和terraform_apply命令。
我引用了official Terraform exemption document和official Terraform remediation document(https://registry.terraform.io/providers/hashicorp/azurerm/3.59.0/docs/resources/subscription_policy_remediation)的代码，并相应地修改了它。
问题中提到的模块。

data "azurerm_policy_assignment" "policy_assignment1" {
  name     = "Test-Inherit-RequiredTag-InheritedTag"
  scope_id = "/subscriptions/${var.subscription_id}"
}

它对我来说也不起作用，所以我最终根据需求修改了模块，并能够产生您正在寻找的输出。

• • 我的main.tf代码：-**

terraform {

required_providers {

azurerm  =  {

source  =  "hashicorp/azurerm"

version  =  "=3.59.0"

}

}

}

  

provider  "azurerm" {

features {}

}

  

data  "azurerm_subscription"  "example" {}

  

data  "azurerm_policy_set_definition"  "example" {

display_name  =  "Audit machines with insecure password security settings"

}

  

resource  "azurerm_subscription_policy_assignment"  "example" {

name  =  "exampleAssignment"

subscription_id  =  data.azurerm_subscription.example.id

policy_definition_id  =  data.azurerm_policy_set_definition.example.id

location  =  "westus"

  

identity {

type  =  "SystemAssigned"

}

}

  

resource  "azurerm_subscription_policy_remediation"  "example" {

name  =  "example"

subscription_id  =  data.azurerm_subscription.example.id

policy_assignment_id  =  azurerm_subscription_policy_assignment.example.id

}

• • 输出：**

执行terrafrom_plan时
（https://i.imgur.com/ZO6iWFg.png）
执行terraform_apply时
（https://i.imgur.com/2JYor6I.png）
通过使用脚本，我成功地执行了所有的terraform步骤和所需的输出。