AzPolicyAdvertizer

last sync: 2025-Oct-23 17:23:10 UTC

Enable logging by category group for Container registries (microsoft.containerregistry/registries) to Event Hub

Azure BuiltIn Policy definition

Source Azure Portal
Display name Enable logging by category group for Container registries (microsoft.containerregistry/registries) to Event Hub
Id 9ba29e83-863d-4fec-81d0-16dd87067cc3
Version 1.2.0
Details on versioning
Versioning Versions supported for Versioning: 2
1.2.0
1.1.0
Built-in Versioning [Preview]
Category Monitoring
Microsoft Learn
Description Resource logs should be enabled to track activities and events that take place on your resources and give you visibility and insights into any changes that occur. This policy deploys a diagnostic setting using a category group to route logs to an Event Hub for Container registries (microsoft.containerregistry/registries).
Cloud environments AzureCloud = true
AzureUSGovernment = unknown
AzureChinaCloud = unknown
Available in AzUSGov Unknown, no evidence if Policy definition is/not available in AzureUSGovernment
Mode Indexed
Type BuiltIn
Preview False
Deprecated False
Effect Default
DeployIfNotExists
Allowed
DeployIfNotExists, AuditIfNotExists, Disabled
RBAC role(s)
Role Name Role Id
Log Analytics Contributor 92aaf0da-9dab-42b6-94a3-d43ce8d16293
Azure Event Hubs Data Owner f526a384-b230-433a-b45c-95f59c4a2dec
Rule aliases THEN-ExistenceCondition (5)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Insights/diagnosticSettings/eventHubAuthorizationRuleId microsoft.insights diagnosticSettings properties.eventHubAuthorizationRuleId True False
Microsoft.Insights/diagnosticSettings/eventHubName microsoft.insights diagnosticSettings properties.eventHubName True False
Microsoft.Insights/diagnosticSettings/logs[*] microsoft.insights diagnosticSettings properties.logs[*] True False
microsoft.insights/diagnosticSettings/logs[*].categoryGroup microsoft.insights diagnosticSettings properties.logs[*].categoryGroup True False
Microsoft.Insights/diagnosticSettings/logs[*].enabled microsoft.insights diagnosticSettings properties.logs[*].enabled True False
Rule resource types IF (1)
Compliance Not a Compliance control
Initiatives usage
Initiative DisplayName Initiative Id Initiative Category State Type polSet in AzUSGov
Enable allLogs category group resource logging for supported resources to Event Hub 85175a36-2f12-419a-96b4-18d5b0096531 Monitoring GA BuiltIn unknown
Enable audit category group resource logging for supported resources to Event Hub 1020d527-2764-4230-92cc-7035e4fcf8a7 Monitoring GA BuiltIn unknown
History
Date/Time (UTC ymd) (i) Change type Change detail
2024-04-29 17:47:10 change Minor (1.1.0 > 1.2.0)
2023-03-27 17:43:07 change Minor (1.0.0 > 1.1.0)
2023-02-10 18:41:56 add 9ba29e83-863d-4fec-81d0-16dd87067cc3
JSON compare
compare mode: version left: version right:
JSON
api-version=2021-06-01
EPAC