AzPolicyAdvertizer

last sync: 2023-May-26 17:43:09 UTC

Azure Policy definition

Enable logging by category group for Bastions (microsoft.network/bastionhosts) to Log Analytics

Name Enable logging by category group for Bastions (microsoft.network/bastionhosts) to Log Analytics
Azure Portal
Id f8352124-56fa-4f94-9441-425109cdc14b
Version 1.0.0
details on versioning
Category Monitoring
Microsoft docs
Description Resource logs should be enabled to track activities and events that take place on your resources and give you visibility and insights into any changes that occur. This policy deploys a diagnostic setting using a category group to route logs to a Log Analytics workspace for Bastions (microsoft.network/bastionhosts).
Mode Indexed
Type BuiltIn
Preview FALSE
Deprecated FALSE
Effect Default
DeployIfNotExists
Allowed
DeployIfNotExists, AuditIfNotExists, Disabled
RBAC
Role(s)
Role Name Role Id
Log Analytics Contributor 92aaf0da-9dab-42b6-94a3-d43ce8d16293
Rule
Aliases		 THEN-ExistenceCondition (4)
Alias Namespace ResourceType DefaultPath Modifiable
Microsoft.Insights/diagnosticSettings/logs[*] microsoft.insights diagnosticSettings properties.logs[*] false
microsoft.insights/diagnosticSettings/logs[*].categoryGroup microsoft.insights diagnosticSettings properties.logs[*].categoryGroup false
Microsoft.Insights/diagnosticSettings/logs[*].enabled microsoft.insights diagnosticSettings properties.logs[*].enabled false
Microsoft.Insights/diagnosticSettings/workspaceId microsoft.insights diagnosticSettings properties.workspaceId false
Rule
ResourceTypes		 IF (1)
Microsoft.network/bastionhosts
Compliance Not a Compliance control
History
Date/Time (UTC ymd) (i) Change type Change detail
2023-02-10 18:41:56 add f8352124-56fa-4f94-9441-425109cdc14b
Initiatives
usage
Initiative DisplayName Initiative Id Initiative Category State Type
Enable audit category group resource logging for supported resources to Log Analytics f5b29bc4-feca-4cc6-a58a-772dd5e290a5 Monitoring GA BuiltIn
JSON