last sync: 2025-Aug-20 17:22:59 UTC

Audit diagnostic setting for selected resource types

Community Policy definition

Source Repository Community-Policy GitHub
JSON Community-Policy GitHub
Deploy policy 18df4014-9705-4839-9bbf-91bb26f59766 (1.0.0) to Azure
Display name Audit diagnostic setting for selected resource types
Id 18df4014-9705-4839-9bbf-91bb26f59766
Version 1.0.0
Details on versioning
Category Storage
Microsoft Learn
Description This policy audit the existence of diagnostic setting and specific log analytics workspaceId for selected resource types.
Mode All
Type Custom Community
Effect Default
AuditIfNotExists
Allowed
AuditIfNotExists, Disabled
RBAC role(s) none
Rule aliases THEN-ExistenceCondition (3)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Insights/diagnosticSettings/logs.enabled microsoft.insights diagnosticSettings properties.logs[*].enabled True False
Microsoft.Insights/diagnosticSettings/metrics.enabled microsoft.insights diagnosticSettings properties.metrics[*].enabled True False
Microsoft.Insights/diagnosticSettings/workspaceId microsoft.insights diagnosticSettings properties.workspaceId True False
Rule resource types THEN-Details (1)
Microsoft.Insights/diagnosticSettings
JSON
EPAC
Deploy policy 18df4014-9705-4839-9bbf-91bb26f59766 (1.0.0) to Azure