AzPolicyAdvertizer

last sync: 2022-Jul-01 16:32:34 UTC

Azure Policy definition

Public IP addresses should have resource logs enabled for Azure DDoS Protection Standard

Name

Public IP addresses should have resource logs enabled for Azure DDoS Protection Standard
Azure Portal

752154a7-1e0f-45c6-a880-ac75a7e4f648

Version

1.0.0
details on versioning

Category

Monitoring
Microsoft docs

Description

Enable resource logs for public IP addressess in diagnostic settings to stream to a Log Analytics workspace. Get detailed visibility into attack traffic and actions taken to mitigate DDoS attacks via notifications, reports and flow logs.

Mode

Indexed

Type

BuiltIn

Preview

FALSE

Deprecated

FALSE

Effect

Default: AuditIfNotExists
Allowed: (AuditIfNotExists, DeployIfNotExists, Disabled)

Used RBAC Role

Role Name	Role Id
Log Analytics Contributor	92aaf0da-9dab-42b6-94a3-d43ce8d16293

Rule Aliases

THEN-ExistenceCondition (3)

Alias	Namespace	ResourceType	DefaultPath	Modifiable
Microsoft.Insights/diagnosticSettings/logs.enabled	microsoft.insights	diagnosticSettings	properties.logs[*].enabled	false
Microsoft.Insights/diagnosticSettings/metrics.enabled	microsoft.insights	diagnosticSettings	properties.metrics[*].enabled	false
Microsoft.Insights/diagnosticSettings/workspaceId	microsoft.insights	diagnosticSettings	properties.workspaceId	false

Rule ResourceTypes

IF (1)
Microsoft.Network/publicIPAddresses

History

Date/Time (UTC ymd) (i)	Change type	Change detail
2021-03-31 14:35:06	add	752154a7-1e0f-45c6-a880-ac75a7e4f648

Used in Initiatives

Initiative DisplayName	Initiative Id	Initiative Category	State	Type
Deploy Diagnostic Settings to Azure Services	Deploy-Diagnostics-LogAnalytics	Monitoring	GA	ALZ

JSON