last sync: 2022-May-24 16:30:29 UTC

Azure Policy definition

Configure network security groups to enable traffic analytics

Name Configure network security groups to enable traffic analytics
Azure Portal
Id e920df7f-9a64-4066-9b58-52684c02a091
Version 1.0.1
details on versioning
Category Network
Microsoft docs
Description Traffic analytics can be enabled for all network security groups hosted in a particular region with the settings provided during policy creation. If it already has Traffic analytics enabled, then policy does not overwrite its settings. Flow Logs are also enabled for the Network security groups that do not have it. Traffic analytics is a cloud-based solution that provides visibility into user and application activity in cloud networks.
Mode Indexed
Type BuiltIn
Preview FALSE
Deprecated FALSE
Effect Default: DeployIfNotExists
Allowed: (DeployIfNotExists, Disabled)
Used RBAC Role
Role Name Role Id
Contributor b24988ac-6180-42a0-ab88-20f7382dd24c
Rule Aliases THEN-ExistenceCondition (3)
Alias Namespace ResourceType DefaultPath Modifiable
Microsoft.Network/networkWatchers/flowLogs/enabled Microsoft.Network networkWatchers/flowLogs properties.enabled false
Microsoft.Network/networkWatchers/flowLogs/flowAnalyticsConfiguration.networkWatcherFlowAnalyticsConfiguration.enabled Microsoft.Network networkWatchers/flowLogs properties.flowAnalyticsConfiguration.networkWatcherFlowAnalyticsConfiguration.enabled false
Microsoft.Network/networkWatchers/flowLogs/flowAnalyticsConfiguration.networkWatcherFlowAnalyticsConfiguration.trafficAnalyticsInterval Microsoft.Network networkWatchers/flowLogs properties.flowAnalyticsConfiguration.networkWatcherFlowAnalyticsConfiguration.trafficAnalyticsInterval false
Rule ResourceTypes IF (1)
THEN-Deployment (2)
Date/Time (UTC ymd) (i) Change type Change detail
2021-12-10 17:29:56 change Patch (1.0.0 > 1.0.1) *changes on text case sensitivity are not tracked
2021-05-18 14:34:48 add e920df7f-9a64-4066-9b58-52684c02a091
Used in Initiatives none
JSON Changes