AzPolicyAdvertizer

last sync: 2024-Apr-24 17:46:58 UTC

Configure virtual network to enable Flow Log and Traffic Analytics

Azure BuiltIn Policy definition

Source Azure Portal
Display name Configure virtual network to enable Flow Log and Traffic Analytics
Id 3e9965dc-cc13-47ca-8259-a4252fd0cf7b
Version 1.1.1
Details on versioning
Category Network
Microsoft Learn
Description Traffic analytics and Flow logs can be enabled for all virtual networks hosted in a particular region with the settings provided during policy creation. This policy does not overwrite current setting for virtual networks that already have these feature enabled. Traffic analytics is a cloud-based solution that provides visibility into user and application activity in cloud networks.
Mode Indexed
Type BuiltIn
Preview False
Deprecated False
Effect Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled
RBAC role(s)
Role Name Role Id
Contributor b24988ac-6180-42a0-ab88-20f7382dd24c
Rule aliases THEN-Details (2)
Alias Namespace ResourceType DefaultPath Modifiable
Microsoft.Network/virtualNetworks/flowLogs Microsoft.Network virtualNetworks properties.flowLogs false
Microsoft.Network/virtualNetworks/flowLogs[*].id Microsoft.Network virtualNetworks properties.flowLogs[*].id false
THEN-ExistenceCondition (3)
Alias Namespace ResourceType DefaultPath Modifiable
Microsoft.Network/networkWatchers/flowLogs/enabled Microsoft.Network networkWatchers/flowLogs properties.enabled false
Microsoft.Network/networkWatchers/flowLogs/flowAnalyticsConfiguration.networkWatcherFlowAnalyticsConfiguration.enabled Microsoft.Network networkWatchers/flowLogs properties.flowAnalyticsConfiguration.networkWatcherFlowAnalyticsConfiguration.enabled false
Microsoft.Network/networkWatchers/flowLogs/flowAnalyticsConfiguration.networkWatcherFlowAnalyticsConfiguration.trafficAnalyticsInterval Microsoft.Network networkWatchers/flowLogs properties.flowAnalyticsConfiguration.networkWatcherFlowAnalyticsConfiguration.trafficAnalyticsInterval false
Rule resource types IF (1)
Microsoft.Network/virtualNetworks
THEN-Deployment (2)
Microsoft.Network/networkWatchers/flowLogs
Microsoft.Resources/deployments
Compliance Not a Compliance control
Initiatives usage none
History
Date/Time (UTC ymd) (i) Change type Change detail
2024-02-13 19:27:15 change Patch (1.1.0 > 1.1.1)
2024-01-12 18:35:06 change Minor (1.0.0 > 1.1.0)
2023-04-06 17:42:16 add 3e9965dc-cc13-47ca-8259-a4252fd0cf7b
JSON compare
compare mode: version left: version right:
JSON
api-version=2021-06-01
EPAC