AzPolicyAdvertizer

last sync: 2024-May-03 17:44:48 UTC

Deploy Diagnostic Settings for Network Security Groups to Log Analytics workspace

Azure Landing Zones (ALZ) Policy definition

Source Repository Azure Landing Zones (ALZ) GitHub
JSON Deploy-Diagnostics-NetworkSecurityGroups
Display name Deploy Diagnostic Settings for Network Security Groups to Log Analytics workspace
Id Deploy-Diagnostics-NetworkSecurityGroups
Version 1.1.0
Details on versioning
Category Monitoring
Description Deploys the diagnostic settings for Network Security Groups to stream to a Log Analytics workspace when any Network Security Groups which is missing this diagnostic settings is created or updated. The Policy will set the diagnostic with all metrics and category enabled
Mode Indexed
Type Custom Azure Landing Zones (ALZ)
Preview False
Deprecated False
Effect Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled
RBAC role(s)
Role Name Role Id
Monitoring Contributor 749f88d5-cbae-40b8-bcfc-e573ddc772fa
Log Analytics Contributor 92aaf0da-9dab-42b6-94a3-d43ce8d16293
Rule aliases THEN-ExistenceCondition (2)
Alias Namespace ResourceType DefaultPath Modifiable
Microsoft.Insights/diagnosticSettings/logs.enabled microsoft.insights diagnosticSettings properties.logs[*].enabled false
Microsoft.Insights/diagnosticSettings/workspaceId microsoft.insights diagnosticSettings properties.workspaceId false
Rule resource types IF (1)
Microsoft.Network/networkSecurityGroups
Initiatives usage
Initiative DisplayName Initiative Id Initiative Category State
Deploy Diagnostic Settings to Azure Services Deploy-Diagnostics-LogAnalytics Monitoring GA
History
Date/Time (UTC ymd) (i) Change type Change detail
2022-10-25 25:16:43 change Minor (1.0.0 > 1.1.0)
JSON compare
compare mode: version left: version right:
JSON
EPAC