Unable to delete the DDoS protection plan

Hi @KapilAnanth-MSFT ,

• DDoS protection plans cannot be deleted if they are associated with a virtual network. So the first step is to disassociate the virtual network from DDOS plan.
• You can do it through Azure portal by going to virtual network > DDOS Network protection plan and select disable.
• 
• Or you can do it by going to Cloud PowerShell and run the below Powershell command

# Gets the most updated version of the virtual network 
$vnet = Get-AzVirtualNetwork -Name MyVnet -ResourceGroupName MyResourceGroup $vnet.DdosProtectionPlan = $null 
$vnet.EnableDdosProtection = $false 
$vnet | Set-AzVirtualNetwork

• However, as you mentioned every time you disable the DDOS protection plan from the virtual network the setting is reenabled.
• It seems, you are using Policy - Virtual networks should be protected by Azure DDoS Protection which re-enables the DDOS protection on the virtual network.
• Hence, I advised you to exempt the policy on the virtual network and then disable the ddos plan.
• 
• Create an exemption as given in below snapshot for the given virtual network only

Policy Exemption using az cli 
az policy exemption create --name
                           [--description]
                           [--display-name]
                           [--exemption-category {Mitigated, Waiver}]
                           [--expires-on]
                           [--metadata]
                           [--policy-assignment]
                           [--policy-definition-reference-ids]
                           [--resource-group]
                           [--scope]

• After policy exemption go ahead and disassociate the vnet from DDOS plan as performed in the previous step.
• If you follow the plan, you should successfully be able to disable virtual network from the plan and would be able to delete the ddos protection plan.

Regards'

Ujjawal Tyagi