AzPolicyAdvertizer

last sync: 2023-Jun-19 17:45:01 UTC

Community Policy definition

Deploy Diagnostic Settings for Azure Storage to Log Analytics workspace

Name

Deploy Diagnostic Settings for Azure Storage to Log Analytics workspace
Community-Policy GitHub

storage_deploy-storage-monitoring-log-analytics_storageaccounts

Version

n/a
details on versioning

Category

Monitoring
Microsoft docs

Description

Deploys the diagnostic settings for Azure Storage to stream to a regional Log Analytics workspace when any Azure Storage which is missing this diagnostic settings is created or updated.

Mode

Indexed

Type

Custom Community

Effect

Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled

Used RBAC Role

Role Name	Role Id
Monitoring Contributor	749f88d5-cbae-40b8-bcfc-e573ddc772fa
Log Analytics Contributor	92aaf0da-9dab-42b6-94a3-d43ce8d16293

Rule Aliases

THEN-ExistenceCondition (2)

Alias	Namespace	ResourceType	DefaultPath	Modifiable
Microsoft.Insights/diagnosticSettings/logs.enabled	microsoft.insights	diagnosticSettings	properties.logs[*].enabled	false
Microsoft.Insights/diagnosticSettings/metrics.enabled	microsoft.insights	diagnosticSettings	properties.metrics[*].enabled	false

Rule ResourceTypes

IF (1)
Microsoft.Storage/storageAccounts

JSON