last sync: 2020-Sep-22 14:52:15 UTC

Azure Policy

Automatic provisioning of the Log Analytics monitoring agent should be enabled on your subscription

Policy DisplayName Automatic provisioning of the Log Analytics monitoring agent should be enabled on your subscription
Policy Id 475aae12-b88a-4572-8b36-9b712b2b3a17
Policy Category Security Center
Policy Description Enable automatic provisioning of the Log Analytics monitoring agent in order to collect security data
Policy Mode All
Policy Type BuiltIn
Policy in Preview FALSE
Policy Deprecated FALSE
Policy Effect Default: AuditIfNotExists
Allowed: (AuditIfNotExists,Disabled)
Roles used none
Policy Changes no changes
Used in Policy Initiative(s)
Initiative DisplayName Initiative Id
CIS Microsoft Azure Foundations Benchmark 1.1.0 1a5bb27d-173f-493e-9568-eb56638dde4d
[Preview]: Azure Security Benchmark 42a694ed-f65e-42b2-aa9e-8052e9740a92
HITRUST/HIPAA a169a624-5599-4385-a696-c8d643089fab
Policy Rule
{
  "properties": {
    "displayName": "Automatic provisioning of the Log Analytics monitoring agent should be enabled on your subscription",
    "policyType": "BuiltIn",
    "mode": "All",
    "description": "Enable automatic provisioning of the Log Analytics monitoring agent in order to collect security data",
    "metadata": {
      "version": "1.0.0",
      "category": "Security Center"
    },
    "parameters": {
      "effect": {
        "type": "String",
        "metadata": {
          "displayName": "Effect",
          "description": "Enable or disable the execution of the policy"
        },
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "defaultValue": "AuditIfNotExists"
      }
    },
    "policyRule": {
      "if": {
        "field": "type",
        "equals": "Microsoft.Resources/subscriptions"
      },
      "then": {
      "effect": "[parameters('effect')]",
        "details": {
          "type": "Microsoft.Security/autoProvisioningSettings",
          "existenceCondition": {
            "field": "Microsoft.Security/autoProvisioningSettings/autoProvision",
            "equals": "On"
          }
        }
      }
    }
  },
  "id": "/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17",
  "type": "Microsoft.Authorization/policyDefinitions",
  "name": "475aae12-b88a-4572-8b36-9b712b2b3a17"
}