An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
The behavior is caused by subscription-level region restrictions and capacity policies, not by the Azure Policy assignment that lists East US as allowed.
Two different mechanisms are in effect:
- Region access / optimization policy
Azure can restrict which regions a subscription is allowed to use, or temporarily block new customers from specific regions. When that happens, attempts to deploy in a blocked region show errors like: “Your subscription doesn't support virtual machine creation in East US. Choose a different location” or “This policy maintains a set of best available regions where your subscription can deploy resources.” This is independent of any custom Azure Policy. Even if a policy allowseastus, the subscription itself can still be ineligible for that region. - Location ineligible / capacity controls
For some regions, Microsoft prioritizes capacity for existing customers. New or specific subscription types (including some student offers) can be blocked from creating resources in those regions until access is granted. This is the same class of issue described for other regions in the documentation.
To fix or work around the issue:
- Try an alternative allowed region
Use one of the regions that both:- Appear in the VM creation region dropdown, and
- Are not blocked by the “best available regions” optimization message.
- If no region works (current situation), open a support request
Because the subscription is effectively blocked from creating resources, this must be remediated by Microsoft support:- Sign in to the Azure portal.
- Create a new support request.
- For the problem type, choose something like Service and subscription limits (quotas) or Region access (wording varies), and clearly state:
- Subscription type (Azure for Students).
- Exact error messages.
- That the policy assignment allows
eastusbut the subscription cannot deploy there and cannot deploy in any other region either.
- Ask for region access remediation or clarification of which regions are enabled for the subscription.
Until support updates the subscription’s region access, VM creation will continue to fail regardless of the Azure Policy configuration.
References:
- Resolve location ineligible errors
- Region optimization for Microsoft Azure customers
- Common issues: Unavailable virtual machine SKU
- Troubleshoot allocation failures when you create or resize VMs in Azure
- Regions for virtual machines in Azure
- Can't create Azure SQL server via Azure portal - Microsoft Q&A
- Azure Deployment Takes 70 Minutes to Fail with Obscure Error - Microsoft Q&A