From ab11e6e8d81e57121fa76cd875466eb60f312d19 Mon Sep 17 00:00:00 2001 From: Azure Policy Bot Date: Thu, 23 May 2024 03:16:25 +0000 Subject: [PATCH] Built-in Policy Release fcb5f478 --- ...stallAzureBackupExtensionWithTag_DINE.json | 220 + ...llAzureBackupExtensionWithoutTag_DINE.json | 234 + ...edDisks_EnableAzureBackupWithTag_DINE.json | 208 + ...isks_EnableAzureBackupWithoutTag_DINE.json | 222 + .../AMA_UAI_Linux_VMSS_DINE.json | 94 +- .../AMA_UAI_Linux_VM_DINE.json | 94 +- .../AMA_UAI_Windows_VMSS_DINE.json | 94 +- .../AMA_UAI_Windows_VM_DINE.json | 94 +- ...zureMonitor_Agent_Linux_VMSS_UAI_DINE.json | 27 +- .../AzureMonitor_Agent_Linux_VM_UAI_DINE.json | 27 +- ...rosoft_Defender_For_Storage_Full_DINE.json | 28 +- ...Monitor_DiagSettings_eventHub_allLogs.json | 3858 +++++++++++++++++ ...reMonitor_DiagSettings_eventHub_audit.json | 1173 ++++- ...tor_DiagSettings_logAnalytics_allLogs.json | 3432 +++++++++++++++ ...nitor_DiagSettings_logAnalytics_audit.json | 1059 ++++- ...eMonitor_DiagSettings_storage_allLogs.json | 3429 +++++++++++++++ ...ureMonitor_DiagSettings_storage_audit.json | 1059 ++++- 17 files changed, 14813 insertions(+), 539 deletions(-) create mode 100644 built-in-policies/policyDefinitions/Backup/Kubernetes_InstallAzureBackupExtensionWithTag_DINE.json create mode 100644 built-in-policies/policyDefinitions/Backup/Kubernetes_InstallAzureBackupExtensionWithoutTag_DINE.json create mode 100644 built-in-policies/policyDefinitions/Backup/ManagedDisks_EnableAzureBackupWithTag_DINE.json create mode 100644 built-in-policies/policyDefinitions/Backup/ManagedDisks_EnableAzureBackupWithoutTag_DINE.json create mode 100644 built-in-policies/policySetDefinitions/Monitoring/AzureMonitor_DiagSettings_eventHub_allLogs.json create mode 100644 built-in-policies/policySetDefinitions/Monitoring/AzureMonitor_DiagSettings_logAnalytics_allLogs.json create mode 100644 built-in-policies/policySetDefinitions/Monitoring/AzureMonitor_DiagSettings_storage_allLogs.json diff --git a/built-in-policies/policyDefinitions/Backup/Kubernetes_InstallAzureBackupExtensionWithTag_DINE.json b/built-in-policies/policyDefinitions/Backup/Kubernetes_InstallAzureBackupExtensionWithTag_DINE.json new file mode 100644 index 000000000..6c39bf4d9 --- /dev/null +++ b/built-in-policies/policyDefinitions/Backup/Kubernetes_InstallAzureBackupExtensionWithTag_DINE.json @@ -0,0 +1,220 @@ +{ + "properties": { + "displayName": "[Preview]: Install Azure Backup Extension in AKS clusters (Managed Cluster) with a given tag.", + "policyType": "BuiltIn", + "mode": "Indexed", + "description": "Installing the Azure Backup Extension is a pre-requisite for protecting your AKS Clusters. Enforce installation of backup extension on all AKS clusters containing a given tag. Doing this can help you manage Backup of AKS Clusters at scale.", + "metadata": { + "version": "1.0.0-preview", + "category": "Backup", + "preview": true + }, + "version": "1.0.0-preview", + "parameters": { + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Enable or disable the execution of the policy" + }, + "allowedValues": [ + "AuditIfNotExists", + "DeployIfNotExists", + "Disabled" + ], + "defaultValue": "DeployIfNotExists" + }, + "location": { + "type": "String", + "metadata": { + "displayName": "Location (Specify the location of the AKS Clusters that you want to protect)", + "description": "Specify the location of the AKS Clusters that you want to protect. For example - CanadaCentral", + "strongType": "location" + } + }, + "storageAccountId": { + "type": "String", + "metadata": { + "displayName": "Storage Account (In the same location as specified above)", + "description": "The storage account is used to store backup data within a container. Please ensure that the storage account is in the same region as the AKS cluster to be backed up.", + "strongType": "Microsoft.Storage/storageAccounts" + } + }, + "inclusionTagName": { + "type": "String", + "metadata": { + "displayName": "Inclusion Tag Name", + "description": "Name of the tag to use for including AKS Clusters in the scope of this policy. This should be used along with the Inclusion Tag Value parameter. Learn more at https://aka.ms/AB-AksBackupAzPolicies" + } + }, + "inclusionTagValues": { + "type": "Array", + "metadata": { + "displayName": "Inclusion Tag Values", + "description": "Value of the tag to use for including AKS Clusters in the scope of this policy (in case of multiple values, use a comma-separated list). This should be used along with the Inclusion Tag Name parameter. Learn more at https://aka.ms/AB-AksBackupAzPolicies." + } + } + }, + "policyRule": { + "if": { + "allOf": [ + { + "field": "type", + "equals": "Microsoft.ContainerService/managedClusters" + }, + { + "field": "[concat('tags[', parameters('inclusionTagName'), ']')]", + "in": "[parameters('inclusionTagValues')]" + }, + { + "field": "location", + "equals": "[parameters('location')]" + } + ] + }, + "then": { + "effect": "[parameters('effect')]", + "details": { + "type": "Microsoft.KubernetesConfiguration/extensions", + "evaluationDelay": "PT30M", + "existenceCondition": { + "field": "Microsoft.KubernetesConfiguration/extensions/extensionType", + "equals": "microsoft.dataprotection.kubernetes" + }, + "roleDefinitionIds": [ + "/providers/microsoft.authorization/roleDefinitions/8e3af657-a8ff-443c-a75c-2fe8c4bcb635" + ], + "deployment": { + "properties": { + "parameters": { + "clusterName": { + "value": "[field('name')]" + }, + "storageAccountId": { + "value": "[parameters('storageAccountId')]" + }, + "storageAccountResourceGroup": { + "value": "[first(skip(split(parameters('storageAccountId'), '/'), 4))]" + }, + "storageAccountSubscriptionId": { + "value": "[first(skip(split(parameters('storageAccountId'), '/'), 2))]" + }, + "storageAccount": { + "value": "[first(skip(split(parameters('storageAccountId'), '/'), 8))]" + }, + "tenantId": { + "value": "[subscription().tenantId]" + } + }, + "mode": "incremental", + "template": { + "parameters": { + "clusterName": { + "type": "string" + }, + "releaseTrain": { + "type": "string", + "defaultValue": "stable" + }, + "storageAccountResourceGroup": { + "type": "string" + }, + "storageAccountSubscriptionId": { + "type": "string" + }, + "storageAccountId": { + "type": "string" + }, + "storageAccount": { + "type": "string" + }, + "tenantId": { + "type": "string" + }, + "useAAD": { + "type": "string", + "defaultValue": "true" + } + }, + "variables": { + "blobContainer": "[take(concat('azure-aks-backup-', parameters('clusterName')), 63)]", + "storageBlobDataContributorRoleDefinitionId": "[subscriptionResourceId('Microsoft.Authorization/roleDefinitions', 'ba92f5b4-2d11-453d-a403-e96b0029c9fe')]", + "extensionName": "azure-aks-backup", + "storageAccountContainerDeploymentName": "[guid(resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccount')))]" + }, + "contentVersion": "1.0.0.0", + "resources": [ + { + "type": "Microsoft.Resources/deployments", + "apiVersion": "2021-04-01", + "name": "[variables('storageAccountContainerDeploymentName')]", + "subscriptionId": "[parameters('storageAccountSubscriptionId')]", + "resourceGroup": "[parameters('storageAccountResourceGroup')]", + "parameters": {}, + "dependsOn": [ + "[extensionResourceId(resourceId('Microsoft.ContainerService/managedClusters', parameters('clusterName')), 'Microsoft.KubernetesConfiguration/extensions', variables('extensionName'))]" + ], + "properties": { + "mode": "incremental", + "template": { + "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", + "contentVersion": "1.0.0.0", + "parameters": {}, + "resources": [ + { + "type": "Microsoft.Storage/storageAccounts/blobServices/containers", + "apiVersion": "2022-05-01", + "name": "[format('{0}/default/{1}', parameters('storageAccount'), variables('blobContainer'))]", + "dependsOn": [] + }, + { + "type": "Microsoft.Authorization/roleAssignments", + "apiVersion": "2020-10-01-preview", + "scope": "[format('Microsoft.Storage/storageAccounts/{0}', parameters('storageAccount'))]", + "name": "[guid(resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccount')), resourceId('Microsoft.ContainerService/managedClusters', parameters('clusterName')), variables('storageBlobDataContributorRoleDefinitionId'))]", + "properties": { + "roleDefinitionId": "[variables('storageBlobDataContributorRoleDefinitionId')]", + "principalId": "[reference(extensionResourceId(resourceId('Microsoft.ContainerService/managedClusters', parameters('clusterName')), 'Microsoft.KubernetesConfiguration/extensions', variables('extensionName')), '2021-09-01').aksAssignedIdentity.principalId]", + "principalType": "ServicePrincipal" + } + } + ] + } + } + }, + { + "type": "Microsoft.KubernetesConfiguration/extensions", + "name": "[variables('extensionName')]", + "properties": { + "autoUpgradeMinorVersion": "true", + "extensionType": "microsoft.dataprotection.kubernetes", + "releaseTrain": "[parameters('releaseTrain')]", + "configurationSettings": { + "configuration.backupStorageLocation.bucket": "[variables('blobContainer')]", + "configuration.backupStorageLocation.config.resourceGroup": "[parameters('storageAccountResourceGroup')]", + "configuration.backupStorageLocation.config.subscriptionId": "[parameters('storageAccountSubscriptionId')]", + "configuration.backupStorageLocation.config.storageAccount": "[parameters('storageAccount')]", + "credentials.tenantId": "[parameters('tenantId')]", + "configuration.backupStorageLocation.config.useAAD": "[parameters('useAAD')]", + "configuration.backupStorageLocation.config.storageAccountURI": "[reference(parameters('storageAccountId'), '2021-04-01').primaryEndpoints.blob]" + } + }, + "scope": "[concat('Microsoft.ContainerService/managedClusters/',parameters('clusterName'))]", + "apiVersion": "2022-03-01", + "comments": "Install the Backup Extension in the managed (AKS) cluster." + } + ], + "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#" + } + } + } + } + } + }, + "versions": [ + "1.0.0-PREVIEW" + ] + }, + "id": "/providers/Microsoft.Authorization/policyDefinitions/bdff5235-9f40-4a32-893f-38a03d5d607c", + "name": "bdff5235-9f40-4a32-893f-38a03d5d607c" +} \ No newline at end of file diff --git a/built-in-policies/policyDefinitions/Backup/Kubernetes_InstallAzureBackupExtensionWithoutTag_DINE.json b/built-in-policies/policyDefinitions/Backup/Kubernetes_InstallAzureBackupExtensionWithoutTag_DINE.json new file mode 100644 index 000000000..4e00d389c --- /dev/null +++ b/built-in-policies/policyDefinitions/Backup/Kubernetes_InstallAzureBackupExtensionWithoutTag_DINE.json @@ -0,0 +1,234 @@ +{ + "properties": { + "displayName": "[Preview]: Install Azure Backup Extension in AKS clusters (Managed Cluster) without a given tag.", + "policyType": "BuiltIn", + "mode": "Indexed", + "description": "Installing the Azure Backup Extension is a pre-requisite for protecting your AKS Clusters. Enforce installation of backup extension on all AKS clusters without a particular tag value. Doing this can help you manage Backup of AKS Clusters at scale.", + "metadata": { + "version": "1.0.0-preview", + "category": "Backup", + "preview": true + }, + "version": "1.0.0-preview", + "parameters": { + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Enable or disable the execution of the policy" + }, + "allowedValues": [ + "AuditIfNotExists", + "DeployIfNotExists", + "Disabled" + ], + "defaultValue": "DeployIfNotExists" + }, + "location": { + "type": "String", + "metadata": { + "displayName": "Location (Specify the location of the AKS Clusters that you want to protect)", + "description": "Specify the location of the AKS Clusters that you want to protect. For example - CanadaCentral", + "strongType": "location" + } + }, + "storageAccountId": { + "type": "String", + "metadata": { + "displayName": "Storage Account (In the same location as specified above)", + "description": "The storage account is used to store backup data within a container. Please ensure that the storage account is in the same region as the AKS cluster to be backed up.", + "strongType": "Microsoft.Storage/storageAccounts" + } + }, + "exclusionTagName": { + "type": "String", + "metadata": { + "displayName": "Exclusion Tag Name", + "description": "Name of the tag to use for excluding AKS Clusters from the scope of this policy. This should be used along with the Exclusion Tag Values parameter. Learn more at https://aka.ms/AB-AksBackupAzPolicies" + } + }, + "exclusionTagValues": { + "type": "Array", + "metadata": { + "displayName": "Exclusion Tag Values", + "description": "Value of the tag to use for excluding AKS Clusters from the scope of this policy (in case of multiple values, use a comma-separated list). This should be used along with the Exclusion Tag Name parameter. Learn more at https://aka.ms/AB-AksBackupAzPolicies." + } + } + }, + "policyRule": { + "if": { + "allOf": [ + { + "field": "type", + "equals": "Microsoft.ContainerService/managedClusters" + }, + { + "anyOf": [ + { + "not": { + "field": "[concat('tags[', parameters('exclusionTagName'), ']')]", + "in": "[parameters('exclusionTagValues')]" + } + }, + { + "value": "[empty(parameters('exclusionTagValues'))]", + "equals": "true" + }, + { + "value": "[empty(parameters('exclusionTagName'))]", + "equals": "true" + } + ] + }, + { + "field": "location", + "equals": "[parameters('location')]" + } + ] + }, + "then": { + "effect": "[parameters('effect')]", + "details": { + "type": "Microsoft.KubernetesConfiguration/extensions", + "evaluationDelay": "PT30M", + "existenceCondition": { + "field": "Microsoft.KubernetesConfiguration/extensions/extensionType", + "equals": "microsoft.dataprotection.kubernetes" + }, + "roleDefinitionIds": [ + "/providers/microsoft.authorization/roleDefinitions/8e3af657-a8ff-443c-a75c-2fe8c4bcb635" + ], + "deployment": { + "properties": { + "parameters": { + "clusterName": { + "value": "[field('name')]" + }, + "storageAccountId": { + "value": "[parameters('storageAccountId')]" + }, + "storageAccountResourceGroup": { + "value": "[first(skip(split(parameters('storageAccountId'), '/'), 4))]" + }, + "storageAccountSubscriptionId": { + "value": "[first(skip(split(parameters('storageAccountId'), '/'), 2))]" + }, + "storageAccount": { + "value": "[first(skip(split(parameters('storageAccountId'), '/'), 8))]" + }, + "tenantId": { + "value": "[subscription().tenantId]" + } + }, + "mode": "incremental", + "template": { + "parameters": { + "clusterName": { + "type": "string" + }, + "releaseTrain": { + "type": "string", + "defaultValue": "stable" + }, + "storageAccountResourceGroup": { + "type": "string" + }, + "storageAccountSubscriptionId": { + "type": "string" + }, + "storageAccountId": { + "type": "string" + }, + "storageAccount": { + "type": "string" + }, + "tenantId": { + "type": "string" + }, + "useAAD": { + "type": "string", + "defaultValue": "true" + } + }, + "variables": { + "blobContainer": "[take(concat('azure-aks-backup-', parameters('clusterName')), 63)]", + "storageBlobDataContributorRoleDefinitionId": "[subscriptionResourceId('Microsoft.Authorization/roleDefinitions', 'ba92f5b4-2d11-453d-a403-e96b0029c9fe')]", + "extensionName": "azure-aks-backup", + "storageAccountContainerDeploymentName": "[guid(resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccount')))]" + }, + "contentVersion": "1.0.0.0", + "resources": [ + { + "type": "Microsoft.Resources/deployments", + "apiVersion": "2021-04-01", + "name": "[variables('storageAccountContainerDeploymentName')]", + "subscriptionId": "[parameters('storageAccountSubscriptionId')]", + "resourceGroup": "[parameters('storageAccountResourceGroup')]", + "parameters": {}, + "dependsOn": [ + "[extensionResourceId(resourceId('Microsoft.ContainerService/managedClusters', parameters('clusterName')), 'Microsoft.KubernetesConfiguration/extensions', variables('extensionName'))]" + ], + "properties": { + "mode": "incremental", + "template": { + "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", + "contentVersion": "1.0.0.0", + "parameters": {}, + "resources": [ + { + "type": "Microsoft.Storage/storageAccounts/blobServices/containers", + "apiVersion": "2022-05-01", + "name": "[format('{0}/default/{1}', parameters('storageAccount'), variables('blobContainer'))]", + "dependsOn": [] + }, + { + "type": "Microsoft.Authorization/roleAssignments", + "apiVersion": "2020-10-01-preview", + "scope": "[format('Microsoft.Storage/storageAccounts/{0}', parameters('storageAccount'))]", + "name": "[guid(resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccount')), resourceId('Microsoft.ContainerService/managedClusters', parameters('clusterName')), variables('storageBlobDataContributorRoleDefinitionId'))]", + "properties": { + "roleDefinitionId": "[variables('storageBlobDataContributorRoleDefinitionId')]", + "principalId": "[reference(extensionResourceId(resourceId('Microsoft.ContainerService/managedClusters', parameters('clusterName')), 'Microsoft.KubernetesConfiguration/extensions', variables('extensionName')), '2021-09-01').aksAssignedIdentity.principalId]", + "principalType": "ServicePrincipal" + } + } + ] + } + } + }, + { + "type": "Microsoft.KubernetesConfiguration/extensions", + "name": "[variables('extensionName')]", + "properties": { + "autoUpgradeMinorVersion": "true", + "extensionType": "microsoft.dataprotection.kubernetes", + "releaseTrain": "[parameters('releaseTrain')]", + "configurationSettings": { + "configuration.backupStorageLocation.bucket": "[variables('blobContainer')]", + "configuration.backupStorageLocation.config.resourceGroup": "[parameters('storageAccountResourceGroup')]", + "configuration.backupStorageLocation.config.subscriptionId": "[parameters('storageAccountSubscriptionId')]", + "configuration.backupStorageLocation.config.storageAccount": "[parameters('storageAccount')]", + "credentials.tenantId": "[parameters('tenantId')]", + "configuration.backupStorageLocation.config.useAAD": "[parameters('useAAD')]", + "configuration.backupStorageLocation.config.storageAccountURI": "[reference(parameters('storageAccountId'), '2021-04-01').primaryEndpoints.blob]" + } + }, + "scope": "[concat('Microsoft.ContainerService/managedClusters/',parameters('clusterName'))]", + "apiVersion": "2022-03-01", + "comments": "Install the Backup Extension in the managed (AKS) cluster." + } + ], + "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#" + } + } + } + } + } + }, + "versions": [ + "1.0.0-PREVIEW" + ] + }, + "id": "/providers/Microsoft.Authorization/policyDefinitions/9a021087-bba6-42fd-b535-bba75297566b", + "name": "9a021087-bba6-42fd-b535-bba75297566b" +} \ No newline at end of file diff --git a/built-in-policies/policyDefinitions/Backup/ManagedDisks_EnableAzureBackupWithTag_DINE.json b/built-in-policies/policyDefinitions/Backup/ManagedDisks_EnableAzureBackupWithTag_DINE.json new file mode 100644 index 000000000..31ae8b842 --- /dev/null +++ b/built-in-policies/policyDefinitions/Backup/ManagedDisks_EnableAzureBackupWithTag_DINE.json @@ -0,0 +1,208 @@ +{ + "properties": { + "displayName": "[Preview]: Configure backup for Azure Disks (Managed Disks) with a given tag to an existing backup vault in the same region", + "policyType": "BuiltIn", + "mode": "Indexed", + "description": "Enforce backup for all Azure Disks (Managed Disks) that contain a given tag to a central backup vault. Learn more at https://aka.ms/AB-DiskBackupAzPolicies", + "metadata": { + "version": "1.0.0-preview", + "preview": true, + "category": "Backup" + }, + "version": "1.0.0-preview", + "parameters": { + "vaultLocation": { + "type": "String", + "metadata": { + "displayName": "Location (Specify the location of the Azure Disks that you want to protect)", + "description": "Specify the location of the Azure Disks that you want to protect. Azure Disks should be backed up to a vault in the same location. For example - CanadaCentral", + "strongType": "location" + } + }, + "backupPolicyId": { + "type": "String", + "metadata": { + "displayName": "Backup Policy (of type Azure Disks from a vault in the location chosen above)", + "description": "Specify the backup policy to be used for configuring backup for Azure Disks. The selected Azure Backup policy should be of type Azure Disks. This policy needs to be in a vault that is present in the location chosen above. For example - /subscriptions//resourceGroups//providers/Microsoft.DataProtection/vaults//backupPolicies/. Also, make sure that this Backup vault's managed identity has Disk Backup Reader role on the disks to be backed up, and Backup vault's managed identity has Disk Snapshot Contributor on the snapshot resource group.", + "strongType": "Microsoft.DataProtection/backupVaults/backupPolicies" + } + }, + "snapshotResourceGroupName": { + "type": "String", + "metadata": { + "displayName": "Snapshot Resource Group", + "description": "Specify the name of the resource group (in the same subscription where the policy is being deployed) where the snapshot of the Azure disks will be created. Ensure that the backup vault's managed identity has the Disk Snapshot Contributor role on this resource group.", + "strongType": "existingResourceGroups" + } + }, + "inclusionTagName": { + "type": "String", + "metadata": { + "displayName": "Inclusion Tag Name", + "description": "Name of the tag to use for including Azure Disks in the scope of this policy. This should be used along with the Inclusion Tag Value parameter. Learn more at https://aka.ms/AB-DiskBackupAzPolicies" + } + }, + "inclusionTagValues": { + "type": "Array", + "metadata": { + "displayName": "Inclusion Tag Values", + "description": "Value of the tag to use for including Azure Disks in the scope of this policy (in case of multiple values, use a comma-separated list). This should be used along with the Inclusion Tag Name parameter. Learn more at https://aka.ms/AB-DiskBackupAzPolicies." + } + }, + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Enable or disable the execution of the policy" + }, + "allowedValues": [ + "DeployIfNotExists", + "AuditIfNotExists", + "Disabled" + ], + "defaultValue": "DeployIfNotExists" + } + }, + "policyRule": { + "if": { + "allOf": [ + { + "field": "type", + "equals": "Microsoft.Compute/disks" + }, + { + "field": "[concat('tags[', parameters('inclusionTagName'), ']')]", + "in": "[parameters('inclusionTagValues')]" + }, + { + "field": "location", + "equals": "[parameters('vaultLocation')]" + } + ] + }, + "then": { + "effect": "[parameters('effect')]", + "details": { + "type": "Microsoft.DataProtection/backupInstances", + "evaluationDelay": "AfterProvisioning", + "roleDefinitionIds": [ + "/providers/Microsoft.Authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b" + ], + "deployment": { + "properties": { + "mode": "incremental", + "template": { + "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", + "contentVersion": "1.0.0.0", + "parameters": { + "backupPolicyId": { + "type": "string", + "metadata": { + "description": "Backup Policy Id" + } + }, + "diskResourceId": { + "type": "string", + "metadata": { + "description": "ResourceId of the Azure Disk" + } + }, + "location": { + "type": "string", + "metadata": { + "description": "Location for all resources" + } + }, + "snapshotResourceGroupName": { + "type": "string", + "metadata": { + "description": "Resource Group for the disk snapshots" + } + } + }, + "variables": { + "diskName": "[first(skip(split(parameters('diskResourceId'), '/'), 8))]", + "dataSourceType": "Microsoft.Compute/disks", + "resourceType": "Microsoft.Compute/disks", + "backupPolicyName": "[first(skip(split(parameters('backupPolicyId'), '/'), 10))]", + "vaultName": "[first(skip(split(parameters('backupPolicyId'), '/'), 8))]", + "vaultResourceGroup": "[first(skip(split(parameters('backupPolicyId'), '/'), 4))]", + "vaultSubscriptionId": "[first(skip(split(parameters('backupPolicyId'), '/'), 2))]" + }, + "resources": [ + { + "type": "Microsoft.Resources/deployments", + "apiVersion": "2021-04-01", + "resourceGroup": "[variables('vaultResourceGroup')]", + "subscriptionId": "[variables('vaultSubscriptionId')]", + "name": "[concat('DeployProtection-',uniqueString(variables('diskName')))]", + "properties": { + "mode": "Incremental", + "template": { + "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", + "contentVersion": "1.0.0.0", + "parameters": {}, + "resources": [ + { + "type": "Microsoft.DataProtection/backupvaults/backupInstances", + "apiVersion": "2021-01-01", + "name": "[concat(variables('vaultName'), '/', variables('diskName'))]", + "properties": { + "objectType": "BackupInstance", + "dataSourceInfo": { + "objectType": "Datasource", + "resourceID": "[parameters('diskResourceId')]", + "resourceName": "[variables('diskName')]", + "resourceType": "[variables('resourceType')]", + "resourceUri": "[parameters('diskResourceId')]", + "resourceLocation": "[parameters('location')]", + "datasourceType": "[variables('dataSourceType')]" + }, + "policyInfo": { + "policyId": "[parameters('backupPolicyId')]", + "name": "[variables('backupPolicyName')]", + "policyParameters": { + "dataStoreParametersList": [ + { + "objectType": "AzureOperationalStoreParameters", + "dataStoreType": "OperationalStore", + "resourceGroupId": "[concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', parameters('snapshotResourceGroupName'))]" + } + ] + } + }, + "validationType": "DeepValidation" + } + } + ] + } + } + } + ] + }, + "parameters": { + "diskResourceId": { + "value": "[field('id')]" + }, + "backupPolicyId": { + "value": "[parameters('backupPolicyId')]" + }, + "location": { + "value": "[field('location')]" + }, + "snapshotResourceGroupName": { + "value": "[parameters('snapshotResourceGroupName')]" + } + } + } + } + } + } + }, + "versions": [ + "1.0.0-PREVIEW" + ] + }, + "id": "/providers/Microsoft.Authorization/policyDefinitions/7b5a3b1d-d2e1-4c0b-9f3b-ad0b9a2283f4", + "name": "7b5a3b1d-d2e1-4c0b-9f3b-ad0b9a2283f4" +} \ No newline at end of file diff --git a/built-in-policies/policyDefinitions/Backup/ManagedDisks_EnableAzureBackupWithoutTag_DINE.json b/built-in-policies/policyDefinitions/Backup/ManagedDisks_EnableAzureBackupWithoutTag_DINE.json new file mode 100644 index 000000000..db1b720df --- /dev/null +++ b/built-in-policies/policyDefinitions/Backup/ManagedDisks_EnableAzureBackupWithoutTag_DINE.json @@ -0,0 +1,222 @@ +{ + "properties": { + "displayName": "[Preview]: Configure backup for Azure Disks (Managed Disks) without a given tag to an existing backup vault in the same region", + "policyType": "BuiltIn", + "mode": "Indexed", + "description": "Enforce backup for all Azure Disks (Managed Disks) that do not contain a given tag to a central backup vault. Learn more at https://aka.ms/AB-DiskBackupAzPolicies", + "metadata": { + "version": "1.0.0-preview", + "preview": true, + "category": "Backup" + }, + "version": "1.0.0-preview", + "parameters": { + "vaultLocation": { + "type": "String", + "metadata": { + "displayName": "Location (Specify the location of the Azure Disks that you want to protect)", + "description": "Specify the location of the Azure Disks that you want to protect. Azure Disks should be backed up to a vault in the same location. For example - CanadaCentral", + "strongType": "location" + } + }, + "backupPolicyId": { + "type": "String", + "metadata": { + "displayName": "Backup Policy (of type Azure Disks from a vault in the location chosen above)", + "description": "Specify the backup policy to be used for configuring backup for Azure Disks. The selected Azure Backup policy should be of type Azure Disks. This policy needs to be in a vault that is present in the location chosen above. For example - /subscriptions//resourceGroups//providers/Microsoft.DataProtection/vaults//backupPolicies/. Also, make sure that this Backup vault's managed identity has Disk Backup Reader role on the disks to be backed up, and Backup vault's managed identity has Disk Snapshot Contributor on the snapshot resource group.", + "strongType": "Microsoft.DataProtection/backupVaults/backupPolicies" + } + }, + "snapshotResourceGroupName": { + "type": "String", + "metadata": { + "displayName": "Snapshot Resource Group", + "description": "Specify the name of the resource group (in the same subscription where the policy is being deployed) where the snapshot of the Azure disks will be created. Ensure that the backup vault's managed identity has the Disk Snapshot Contributor role on this resource group.", + "strongType": "existingResourceGroups" + } + }, + "exclusionTagName": { + "type": "String", + "metadata": { + "displayName": "Exclusion Tag Name", + "description": "Name of the tag to use for excluding Azure Disks from the scope of this policy. This should be used along with the Exclusion Tag Values parameter." + } + }, + "exclusionTagValues": { + "type": "Array", + "metadata": { + "displayName": "Exclusion Tag Values", + "description": "Value of the tag to use for excluding Azure Disks from the scope of this policy (in case of multiple values, use a comma-separated list). This should be used along with the Exclusion Tag Name parameter." + } + }, + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Enable or disable the execution of the policy" + }, + "allowedValues": [ + "DeployIfNotExists", + "AuditIfNotExists", + "Disabled" + ], + "defaultValue": "DeployIfNotExists" + } + }, + "policyRule": { + "if": { + "allOf": [ + { + "field": "type", + "equals": "Microsoft.Compute/disks" + }, + { + "anyOf": [ + { + "not": { + "field": "[concat('tags[', parameters('exclusionTagName'), ']')]", + "in": "[parameters('exclusionTagValues')]" + } + }, + { + "value": "[empty(parameters('exclusionTagValues'))]", + "equals": "true" + }, + { + "value": "[empty(parameters('exclusionTagName'))]", + "equals": "true" + } + ] + }, + { + "field": "location", + "equals": "[parameters('vaultLocation')]" + } + ] + }, + "then": { + "effect": "[parameters('effect')]", + "details": { + "type": "Microsoft.DataProtection/backupInstances", + "evaluationDelay": "AfterProvisioning", + "roleDefinitionIds": [ + "/providers/Microsoft.Authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b" + ], + "deployment": { + "properties": { + "mode": "incremental", + "template": { + "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", + "contentVersion": "1.0.0.0", + "parameters": { + "backupPolicyId": { + "type": "string", + "metadata": { + "description": "Backup Policy Id" + } + }, + "diskResourceId": { + "type": "string", + "metadata": { + "description": "ResourceId of the Azure Disk" + } + }, + "location": { + "type": "string", + "metadata": { + "description": "Location for all resources" + } + }, + "snapshotResourceGroupName": { + "type": "string", + "metadata": { + "description": "Resource Group for the disk snapshots" + } + } + }, + "variables": { + "diskName": "[first(skip(split(parameters('diskResourceId'), '/'), 8))]", + "dataSourceType": "Microsoft.Compute/disks", + "resourceType": "Microsoft.Compute/disks", + "backupPolicyName": "[first(skip(split(parameters('backupPolicyId'), '/'), 10))]", + "vaultName": "[first(skip(split(parameters('backupPolicyId'), '/'), 8))]", + "vaultResourceGroup": "[first(skip(split(parameters('backupPolicyId'), '/'), 4))]", + "vaultSubscriptionId": "[first(skip(split(parameters('backupPolicyId'), '/'), 2))]" + }, + "resources": [ + { + "type": "Microsoft.Resources/deployments", + "apiVersion": "2021-04-01", + "resourceGroup": "[variables('vaultResourceGroup')]", + "subscriptionId": "[variables('vaultSubscriptionId')]", + "name": "[concat('DeployProtection-',uniqueString(variables('diskName')))]", + "properties": { + "mode": "Incremental", + "template": { + "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", + "contentVersion": "1.0.0.0", + "parameters": {}, + "resources": [ + { + "type": "Microsoft.DataProtection/backupvaults/backupInstances", + "apiVersion": "2021-01-01", + "name": "[concat(variables('vaultName'), '/', variables('diskName'))]", + "properties": { + "objectType": "BackupInstance", + "dataSourceInfo": { + "objectType": "Datasource", + "resourceID": "[parameters('diskResourceId')]", + "resourceName": "[variables('diskName')]", + "resourceType": "[variables('resourceType')]", + "resourceUri": "[parameters('diskResourceId')]", + "resourceLocation": "[parameters('location')]", + "datasourceType": "[variables('dataSourceType')]" + }, + "policyInfo": { + "policyId": "[parameters('backupPolicyId')]", + "name": "[variables('backupPolicyName')]", + "policyParameters": { + "dataStoreParametersList": [ + { + "objectType": "AzureOperationalStoreParameters", + "dataStoreType": "OperationalStore", + "resourceGroupId": "[concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', parameters('snapshotResourceGroupName'))]" + } + ] + } + }, + "validationType": "DeepValidation" + } + } + ] + } + } + } + ] + }, + "parameters": { + "diskResourceId": { + "value": "[field('id')]" + }, + "backupPolicyId": { + "value": "[parameters('backupPolicyId')]" + }, + "location": { + "value": "[field('location')]" + }, + "snapshotResourceGroupName": { + "value": "[parameters('snapshotResourceGroupName')]" + } + } + } + } + } + } + }, + "versions": [ + "1.0.0-PREVIEW" + ] + }, + "id": "/providers/Microsoft.Authorization/policyDefinitions/6e68865f-f3cd-48ec-9bba-54795672eaa4", + "name": "6e68865f-f3cd-48ec-9bba-54795672eaa4" +} \ No newline at end of file diff --git a/built-in-policies/policyDefinitions/ChangeTrackingAndInventory/AMA_UAI_Linux_VMSS_DINE.json b/built-in-policies/policyDefinitions/ChangeTrackingAndInventory/AMA_UAI_Linux_VMSS_DINE.json index 5395da06d..e8838a278 100644 --- a/built-in-policies/policyDefinitions/ChangeTrackingAndInventory/AMA_UAI_Linux_VMSS_DINE.json +++ b/built-in-policies/policyDefinitions/ChangeTrackingAndInventory/AMA_UAI_Linux_VMSS_DINE.json @@ -5,11 +5,11 @@ "mode": "Indexed", "description": "Automate the deployment of Azure Monitor Agent extension on your Linux virtual machine scale sets for enabling ChangeTracking and Inventory. This policy will install the extension and configure it to use the specified user-assigned managed identity if the OS and region are supported, and skip install otherwise. Learn more: https://aka.ms/AMAOverview.", "metadata": { - "version": "1.3.0-preview", + "version": "1.4.0-preview", "category": "ChangeTrackingAndInventory", "preview": true }, - "version": "1.3.0-preview", + "version": "1.4.0-preview", "parameters": { "effect": { "type": "String", @@ -34,6 +34,26 @@ true ] }, + "restrictBringYourOwnUserAssignedIdentityToSubscription": { + "type": "Boolean", + "metadata": { + "displayName": "Restrict Bring Your Own User-Assigned Identity to Subscription", + "description": "Enable this to enforce the user assigned identity must exist in the same subscription as the virtual machine. When true, must provide User-Assigned Managed Identity Name and User-Assigned Managed Identity Resource Group Name parameters. When false, the parameter User Assigned Managed Identity Resource Id will be used instead." + }, + "allowedValues": [ + true, + false + ], + "defaultValue": true + }, + "userAssignedIdentityResourceId": { + "type": "String", + "metadata": { + "displayName": "User-Assigned Managed Identity Resource ID", + "description": "The resource ID of the pre-created user-assigned managed identity. This parameter is only used when the restrict Bring Your Own User-Assigned Identity To Subscription parameter is false." + }, + "defaultValue": "" + }, "userAssignedManagedIdentityName": { "type": "String", "metadata": { @@ -57,60 +77,7 @@ "description": "The list of locations where the policy should be applied.", "strongType": "location" }, - "allowedValues": [ - "australiasoutheast", - "australiaeast", - "brazilsouth", - "canadacentral", - "centralindia", - "centralus", - "eastasia", - "eastus2euap", - "eastus", - "eastus2", - "francecentral", - "japaneast", - "koreacentral", - "northcentralus", - "northeurope", - "norwayeast", - "southcentralus", - "southeastasia", - "switzerlandnorth", - "uaenorth", - "uksouth", - "westcentralus", - "westeurope", - "westus", - "westus2" - ], - "defaultValue": [ - "australiasoutheast", - "australiaeast", - "brazilsouth", - "canadacentral", - "centralindia", - "centralus", - "eastasia", - "eastus2euap", - "eastus", - "eastus2", - "francecentral", - "japaneast", - "koreacentral", - "northcentralus", - "northeurope", - "norwayeast", - "southcentralus", - "southeastasia", - "switzerlandnorth", - "uaenorth", - "uksouth", - "westcentralus", - "westeurope", - "westus", - "westus2" - ] + "defaultValue": [] } }, "policyRule": { @@ -121,8 +88,16 @@ "equals": "Microsoft.Compute/virtualMachineScaleSets" }, { - "field": "location", - "in": "[parameters('listOfApplicableLocations')]" + "anyOf": [ + { + "value": "[empty(parameters('listOfApplicableLocations'))]", + "equals": true + }, + { + "field": "location", + "in": "[parameters('listOfApplicableLocations')]" + } + ] }, { "anyOf": [ @@ -536,7 +511,7 @@ "value": "[field('location')]" }, "userAssignedManagedIdentity": { - "value": "[if(parameters('bringYourOwnUserAssignedManagedIdentity'), concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', parameters('userAssignedManagedIdentityResourceGroup'), '/providers/Microsoft.ManagedIdentity/userAssignedIdentities/', parameters('userAssignedManagedIdentityName')), concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/built-in-identity-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/built-in-identity-', field('location')))]" + "value": "[if(parameters('bringYourOwnUserAssignedManagedIdentity'), if(parameters('restrictBringYourOwnUserAssignedIdentityToSubscription'), concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', parameters('userAssignedManagedIdentityResourceGroup'), '/providers/Microsoft.ManagedIdentity/userAssignedIdentities/', parameters('userAssignedManagedIdentityName')), parameters('userAssignedIdentityResourceId')), concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/built-in-identity-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/built-in-identity-', field('location')))]" } } } @@ -545,6 +520,7 @@ } }, "versions": [ + "1.4.0-PREVIEW", "1.3.0-PREVIEW", "1.2.0-PREVIEW" ] diff --git a/built-in-policies/policyDefinitions/ChangeTrackingAndInventory/AMA_UAI_Linux_VM_DINE.json b/built-in-policies/policyDefinitions/ChangeTrackingAndInventory/AMA_UAI_Linux_VM_DINE.json index cc0c3fa9a..ef8d45b79 100644 --- a/built-in-policies/policyDefinitions/ChangeTrackingAndInventory/AMA_UAI_Linux_VM_DINE.json +++ b/built-in-policies/policyDefinitions/ChangeTrackingAndInventory/AMA_UAI_Linux_VM_DINE.json @@ -5,11 +5,11 @@ "mode": "Indexed", "description": "Automate the deployment of Azure Monitor Agent extension on your Linux virtual machines for enabling ChangeTracking and Inventory. This policy will install the extension and configure it to use the specified user-assigned managed identity if the OS and region are supported, and skip install otherwise. Learn more: https://aka.ms/AMAOverview.", "metadata": { - "version": "1.4.0-preview", + "version": "1.5.0-preview", "category": "ChangeTrackingAndInventory", "preview": true }, - "version": "1.4.0-preview", + "version": "1.5.0-preview", "parameters": { "effect": { "type": "String", @@ -34,6 +34,26 @@ true ] }, + "restrictBringYourOwnUserAssignedIdentityToSubscription": { + "type": "Boolean", + "metadata": { + "displayName": "Restrict Bring Your Own User-Assigned Identity to Subscription", + "description": "Enable this to enforce the user assigned identity must exist in the same subscription as the virtual machine. When true, must provide User-Assigned Managed Identity Name and User-Assigned Managed Identity Resource Group Name parameters. When false, the parameter User Assigned Managed Identity Resource Id will be used instead." + }, + "allowedValues": [ + true, + false + ], + "defaultValue": true + }, + "userAssignedIdentityResourceId": { + "type": "String", + "metadata": { + "displayName": "User-Assigned Managed Identity Resource ID", + "description": "The resource ID of the pre-created user-assigned managed identity. This parameter is only used when the restrict Bring Your Own User-Assigned Identity To Subscription parameter is false." + }, + "defaultValue": "" + }, "userAssignedManagedIdentityName": { "type": "String", "metadata": { @@ -57,60 +77,7 @@ "description": "The list of locations where the policy should be applied.", "strongType": "location" }, - "allowedValues": [ - "australiasoutheast", - "australiaeast", - "brazilsouth", - "canadacentral", - "centralindia", - "centralus", - "eastasia", - "eastus2euap", - "eastus", - "eastus2", - "francecentral", - "japaneast", - "koreacentral", - "northcentralus", - "northeurope", - "norwayeast", - "southcentralus", - "southeastasia", - "switzerlandnorth", - "uaenorth", - "uksouth", - "westcentralus", - "westeurope", - "westus", - "westus2" - ], - "defaultValue": [ - "australiasoutheast", - "australiaeast", - "brazilsouth", - "canadacentral", - "centralindia", - "centralus", - "eastasia", - "eastus2euap", - "eastus", - "eastus2", - "francecentral", - "japaneast", - "koreacentral", - "northcentralus", - "northeurope", - "norwayeast", - "southcentralus", - "southeastasia", - "switzerlandnorth", - "uaenorth", - "uksouth", - "westcentralus", - "westeurope", - "westus", - "westus2" - ] + "defaultValue": [] } }, "policyRule": { @@ -121,8 +88,16 @@ "equals": "Microsoft.Compute/virtualMachines" }, { - "field": "location", - "in": "[parameters('listOfApplicableLocations')]" + "anyOf": [ + { + "value": "[empty(parameters('listOfApplicableLocations'))]", + "equals": true + }, + { + "field": "location", + "in": "[parameters('listOfApplicableLocations')]" + } + ] }, { "anyOf": [ @@ -536,7 +511,7 @@ "value": "[field('location')]" }, "userAssignedManagedIdentity": { - "value": "[if(parameters('bringYourOwnUserAssignedManagedIdentity'), concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', parameters('userAssignedManagedIdentityResourceGroup'), '/providers/Microsoft.ManagedIdentity/userAssignedIdentities/', parameters('userAssignedManagedIdentityName')), concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/built-in-identity-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/built-in-identity-', field('location')))]" + "value": "[if(parameters('bringYourOwnUserAssignedManagedIdentity'), if(parameters('restrictBringYourOwnUserAssignedIdentityToSubscription'), concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', parameters('userAssignedManagedIdentityResourceGroup'), '/providers/Microsoft.ManagedIdentity/userAssignedIdentities/', parameters('userAssignedManagedIdentityName')), parameters('userAssignedIdentityResourceId')), concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/built-in-identity-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/built-in-identity-', field('location')))]" } } } @@ -545,6 +520,7 @@ } }, "versions": [ + "1.5.0-PREVIEW", "1.4.0-PREVIEW", "1.3.0-PREVIEW" ] diff --git a/built-in-policies/policyDefinitions/ChangeTrackingAndInventory/AMA_UAI_Windows_VMSS_DINE.json b/built-in-policies/policyDefinitions/ChangeTrackingAndInventory/AMA_UAI_Windows_VMSS_DINE.json index f54cc7b43..599c3dba5 100644 --- a/built-in-policies/policyDefinitions/ChangeTrackingAndInventory/AMA_UAI_Windows_VMSS_DINE.json +++ b/built-in-policies/policyDefinitions/ChangeTrackingAndInventory/AMA_UAI_Windows_VMSS_DINE.json @@ -5,11 +5,11 @@ "mode": "Indexed", "description": "Automate the deployment of Azure Monitor Agent extension on your Windows virtual machine scale sets for enabling ChangeTracking and Inventory. This policy will install the extension and configure it to use the specified user-assigned managed identity if the OS and region are supported, and skip install otherwise. Learn more: https://aka.ms/AMAOverview.", "metadata": { - "version": "1.0.0-preview", + "version": "1.1.0-preview", "category": "ChangeTrackingAndInventory", "preview": true }, - "version": "1.0.0-preview", + "version": "1.1.0-preview", "parameters": { "effect": { "type": "String", @@ -34,6 +34,26 @@ true ] }, + "restrictBringYourOwnUserAssignedIdentityToSubscription": { + "type": "Boolean", + "metadata": { + "displayName": "Restrict Bring Your Own User-Assigned Identity to Subscription", + "description": "Enable this to enforce the user assigned identity must exist in the same subscription as the virtual machine. When true, must provide User-Assigned Managed Identity Name and User-Assigned Managed Identity Resource Group Name parameters. When false, the parameter User Assigned Managed Identity Resource Id will be used instead." + }, + "allowedValues": [ + true, + false + ], + "defaultValue": true + }, + "userAssignedIdentityResourceId": { + "type": "String", + "metadata": { + "displayName": "User-Assigned Managed Identity Resource ID", + "description": "The resource ID of the pre-created user-assigned managed identity. This parameter is only used when the restrict Bring Your Own User-Assigned Identity To Subscription parameter is false." + }, + "defaultValue": "" + }, "userAssignedManagedIdentityName": { "type": "String", "metadata": { @@ -57,60 +77,7 @@ "description": "The list of locations where the policy should be applied.", "strongType": "location" }, - "allowedValues": [ - "australiasoutheast", - "australiaeast", - "brazilsouth", - "canadacentral", - "centralindia", - "centralus", - "eastasia", - "eastus2euap", - "eastus", - "eastus2", - "francecentral", - "japaneast", - "koreacentral", - "northcentralus", - "northeurope", - "norwayeast", - "southcentralus", - "southeastasia", - "switzerlandnorth", - "uaenorth", - "uksouth", - "westcentralus", - "westeurope", - "westus", - "westus2" - ], - "defaultValue": [ - "australiasoutheast", - "australiaeast", - "brazilsouth", - "canadacentral", - "centralindia", - "centralus", - "eastasia", - "eastus2euap", - "eastus", - "eastus2", - "francecentral", - "japaneast", - "koreacentral", - "northcentralus", - "northeurope", - "norwayeast", - "southcentralus", - "southeastasia", - "switzerlandnorth", - "uaenorth", - "uksouth", - "westcentralus", - "westeurope", - "westus", - "westus2" - ] + "defaultValue": [] } }, "policyRule": { @@ -121,8 +88,16 @@ "equals": "Microsoft.Compute/virtualMachineScaleSets" }, { - "field": "location", - "in": "[parameters('listOfApplicableLocations')]" + "anyOf": [ + { + "value": "[empty(parameters('listOfApplicableLocations'))]", + "equals": true + }, + { + "field": "location", + "in": "[parameters('listOfApplicableLocations')]" + } + ] }, { "anyOf": [ @@ -387,7 +362,7 @@ "value": "[field('location')]" }, "userAssignedManagedIdentity": { - "value": "[if(parameters('bringYourOwnUserAssignedManagedIdentity'), concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', parameters('userAssignedManagedIdentityResourceGroup'), '/providers/Microsoft.ManagedIdentity/userAssignedIdentities/', parameters('userAssignedManagedIdentityName')), concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/built-in-identity-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/built-in-identity-', field('location')))]" + "value": "[if(parameters('bringYourOwnUserAssignedManagedIdentity'), if(parameters('restrictBringYourOwnUserAssignedIdentityToSubscription'), concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', parameters('userAssignedManagedIdentityResourceGroup'), '/providers/Microsoft.ManagedIdentity/userAssignedIdentities/', parameters('userAssignedManagedIdentityName')), parameters('userAssignedIdentityResourceId')), concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/built-in-identity-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/built-in-identity-', field('location')))]" } } } @@ -396,6 +371,7 @@ } }, "versions": [ + "1.1.0-PREVIEW", "1.0.0-PREVIEW" ] }, diff --git a/built-in-policies/policyDefinitions/ChangeTrackingAndInventory/AMA_UAI_Windows_VM_DINE.json b/built-in-policies/policyDefinitions/ChangeTrackingAndInventory/AMA_UAI_Windows_VM_DINE.json index 23761d3e2..09c5820a5 100644 --- a/built-in-policies/policyDefinitions/ChangeTrackingAndInventory/AMA_UAI_Windows_VM_DINE.json +++ b/built-in-policies/policyDefinitions/ChangeTrackingAndInventory/AMA_UAI_Windows_VM_DINE.json @@ -5,11 +5,11 @@ "mode": "Indexed", "description": "Automate the deployment of Azure Monitor Agent extension on your Windows virtual machines for enabling ChangeTracking and Inventory. This policy will install the extension and configure it to use the specified user-assigned managed identity if the OS and region are supported, and skip install otherwise. Learn more: https://aka.ms/AMAOverview.", "metadata": { - "version": "1.0.0-preview", + "version": "1.1.0-preview", "category": "ChangeTrackingAndInventory", "preview": true }, - "version": "1.0.0-preview", + "version": "1.1.0-preview", "parameters": { "effect": { "type": "String", @@ -34,6 +34,26 @@ true ] }, + "restrictBringYourOwnUserAssignedIdentityToSubscription": { + "type": "Boolean", + "metadata": { + "displayName": "Restrict Bring Your Own User-Assigned Identity to Subscription", + "description": "Enable this to enforce the user assigned identity must exist in the same subscription as the virtual machine. When true, must provide User-Assigned Managed Identity Name and User-Assigned Managed Identity Resource Group Name parameters. When false, the parameter User Assigned Managed Identity Resource Id will be used instead." + }, + "allowedValues": [ + true, + false + ], + "defaultValue": true + }, + "userAssignedIdentityResourceId": { + "type": "String", + "metadata": { + "displayName": "User-Assigned Managed Identity Resource ID", + "description": "The resource ID of the pre-created user-assigned managed identity. This parameter is only used when the restrict Bring Your Own User-Assigned Identity To Subscription parameter is false." + }, + "defaultValue": "" + }, "userAssignedManagedIdentityName": { "type": "String", "metadata": { @@ -57,60 +77,7 @@ "description": "The list of locations where the policy should be applied.", "strongType": "location" }, - "allowedValues": [ - "australiasoutheast", - "australiaeast", - "brazilsouth", - "canadacentral", - "centralindia", - "centralus", - "eastasia", - "eastus2euap", - "eastus", - "eastus2", - "francecentral", - "japaneast", - "koreacentral", - "northcentralus", - "northeurope", - "norwayeast", - "southcentralus", - "southeastasia", - "switzerlandnorth", - "uaenorth", - "uksouth", - "westcentralus", - "westeurope", - "westus", - "westus2" - ], - "defaultValue": [ - "australiasoutheast", - "australiaeast", - "brazilsouth", - "canadacentral", - "centralindia", - "centralus", - "eastasia", - "eastus2euap", - "eastus", - "eastus2", - "francecentral", - "japaneast", - "koreacentral", - "northcentralus", - "northeurope", - "norwayeast", - "southcentralus", - "southeastasia", - "switzerlandnorth", - "uaenorth", - "uksouth", - "westcentralus", - "westeurope", - "westus", - "westus2" - ] + "defaultValue": [] } }, "policyRule": { @@ -121,8 +88,16 @@ "equals": "Microsoft.Compute/virtualMachines" }, { - "field": "location", - "in": "[parameters('listOfApplicableLocations')]" + "anyOf": [ + { + "value": "[empty(parameters('listOfApplicableLocations'))]", + "equals": true + }, + { + "field": "location", + "in": "[parameters('listOfApplicableLocations')]" + } + ] }, { "anyOf": [ @@ -387,7 +362,7 @@ "value": "[field('location')]" }, "userAssignedManagedIdentity": { - "value": "[if(parameters('bringYourOwnUserAssignedManagedIdentity'), concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', parameters('userAssignedManagedIdentityResourceGroup'), '/providers/Microsoft.ManagedIdentity/userAssignedIdentities/', parameters('userAssignedManagedIdentityName')), concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/built-in-identity-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/built-in-identity-', field('location')))]" + "value": "[if(parameters('bringYourOwnUserAssignedManagedIdentity'), if(parameters('restrictBringYourOwnUserAssignedIdentityToSubscription'), concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', parameters('userAssignedManagedIdentityResourceGroup'), '/providers/Microsoft.ManagedIdentity/userAssignedIdentities/', parameters('userAssignedManagedIdentityName')), parameters('userAssignedIdentityResourceId')), concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/built-in-identity-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/built-in-identity-', field('location')))]" } } } @@ -396,6 +371,7 @@ } }, "versions": [ + "1.1.0-PREVIEW", "1.0.0-PREVIEW" ] }, diff --git a/built-in-policies/policyDefinitions/Monitoring/AzureMonitor_Agent_Linux_VMSS_UAI_DINE.json b/built-in-policies/policyDefinitions/Monitoring/AzureMonitor_Agent_Linux_VMSS_UAI_DINE.json index 15af037eb..01b8880df 100644 --- a/built-in-policies/policyDefinitions/Monitoring/AzureMonitor_Agent_Linux_VMSS_UAI_DINE.json +++ b/built-in-policies/policyDefinitions/Monitoring/AzureMonitor_Agent_Linux_VMSS_UAI_DINE.json @@ -5,10 +5,10 @@ "mode": "Indexed", "description": "Automate the deployment of Azure Monitor Agent extension on your Linux virtual machine scale sets for collecting telemetry data from the guest OS. This policy will install the extension and configure it to use the specified user-assigned managed identity if the OS and region are supported, and skip install otherwise. Learn more: https://aka.ms/AMAOverview.", "metadata": { - "version": "3.6.0", + "version": "3.7.0", "category": "Monitoring" }, - "version": "3.6.0", + "version": "3.7.0", "parameters": { "effect": { "type": "String", @@ -33,6 +33,26 @@ true ] }, + "restrictBringYourOwnUserAssignedIdentityToSubscription": { + "type": "Boolean", + "metadata": { + "displayName": "Restrict Bring Your Own User-Assigned Identity to Subscription", + "description": "Enable this to enforce the user assigned identity must exist in the same subscription as the virtual machine. When true, must provide User-Assigned Managed Identity Name and User-Assigned Managed Identity Resource Group Name parameters. When false, the parameter User Assigned Managed Identity Resource Id will be used instead." + }, + "allowedValues": [ + true, + false + ], + "defaultValue": true + }, + "userAssignedIdentityResourceId": { + "type": "String", + "metadata": { + "displayName": "User-Assigned Managed Identity Resource ID", + "description": "The resource ID of the pre-created user-assigned managed identity. This parameter is only used when the restrict Bring Your Own User-Assigned Identity To Subscription parameter is false." + }, + "defaultValue": "" + }, "userAssignedManagedIdentityName": { "type": "String", "metadata": { @@ -602,7 +622,7 @@ "value": "[field('location')]" }, "userAssignedManagedIdentity": { - "value": "[if(parameters('bringYourOwnUserAssignedManagedIdentity'), concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', parameters('userAssignedManagedIdentityResourceGroup'), '/providers/Microsoft.ManagedIdentity/userAssignedIdentities/', parameters('userAssignedManagedIdentityName')), concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/built-in-identity-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/built-in-identity-', field('location')))]" + "value": "[if(parameters('bringYourOwnUserAssignedManagedIdentity'), if(parameters('restrictBringYourOwnUserAssignedIdentityToSubscription'), concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', parameters('userAssignedManagedIdentityResourceGroup'), '/providers/Microsoft.ManagedIdentity/userAssignedIdentities/', parameters('userAssignedManagedIdentityName')), parameters('userAssignedIdentityResourceId')), concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/built-in-identity-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/built-in-identity-', field('location')))]" } } } @@ -611,6 +631,7 @@ } }, "versions": [ + "3.7.0", "3.6.0", "3.5.0", "3.4.0" diff --git a/built-in-policies/policyDefinitions/Monitoring/AzureMonitor_Agent_Linux_VM_UAI_DINE.json b/built-in-policies/policyDefinitions/Monitoring/AzureMonitor_Agent_Linux_VM_UAI_DINE.json index 37328d395..118d1cd1e 100644 --- a/built-in-policies/policyDefinitions/Monitoring/AzureMonitor_Agent_Linux_VM_UAI_DINE.json +++ b/built-in-policies/policyDefinitions/Monitoring/AzureMonitor_Agent_Linux_VM_UAI_DINE.json @@ -5,10 +5,10 @@ "mode": "Indexed", "description": "Automate the deployment of Azure Monitor Agent extension on your Linux virtual machines for collecting telemetry data from the guest OS. This policy will install the extension and configure it to use the specified user-assigned managed identity if the OS and region are supported, and skip install otherwise. Learn more: https://aka.ms/AMAOverview.", "metadata": { - "version": "3.6.0", + "version": "3.7.0", "category": "Monitoring" }, - "version": "3.6.0", + "version": "3.7.0", "parameters": { "effect": { "type": "String", @@ -33,6 +33,26 @@ true ] }, + "restrictBringYourOwnUserAssignedIdentityToSubscription": { + "type": "Boolean", + "metadata": { + "displayName": "Restrict Bring Your Own User-Assigned Identity to Subscription", + "description": "Enable this to enforce the user assigned identity must exist in the same subscription as the virtual machine. When true, must provide User-Assigned Managed Identity Name and User-Assigned Managed Identity Resource Group Name parameters. When false, the parameter User Assigned Managed Identity Resource Id will be used instead." + }, + "allowedValues": [ + true, + false + ], + "defaultValue": true + }, + "userAssignedIdentityResourceId": { + "type": "String", + "metadata": { + "displayName": "User-Assigned Managed Identity Resource ID", + "description": "The resource ID of the pre-created user-assigned managed identity. This parameter is only used when the restrict Bring Your Own User-Assigned Identity To Subscription parameter is false." + }, + "defaultValue": "" + }, "userAssignedManagedIdentityName": { "type": "String", "metadata": { @@ -602,7 +622,7 @@ "value": "[field('location')]" }, "userAssignedManagedIdentity": { - "value": "[if(parameters('bringYourOwnUserAssignedManagedIdentity'), concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', parameters('userAssignedManagedIdentityResourceGroup'), '/providers/Microsoft.ManagedIdentity/userAssignedIdentities/', parameters('userAssignedManagedIdentityName')), concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/built-in-identity-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/built-in-identity-', field('location')))]" + "value": "[if(parameters('bringYourOwnUserAssignedManagedIdentity'), if(parameters('restrictBringYourOwnUserAssignedIdentityToSubscription'), concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', parameters('userAssignedManagedIdentityResourceGroup'), '/providers/Microsoft.ManagedIdentity/userAssignedIdentities/', parameters('userAssignedManagedIdentityName')), parameters('userAssignedIdentityResourceId')), concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/built-in-identity-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/built-in-identity-', field('location')))]" } } } @@ -611,6 +631,7 @@ } }, "versions": [ + "3.7.0", "3.6.0", "3.5.0", "3.4.0" diff --git a/built-in-policies/policyDefinitions/Security Center/MDC_Microsoft_Defender_For_Storage_Full_DINE.json b/built-in-policies/policyDefinitions/Security Center/MDC_Microsoft_Defender_For_Storage_Full_DINE.json index 99e62b418..142ab7d1b 100644 --- a/built-in-policies/policyDefinitions/Security Center/MDC_Microsoft_Defender_For_Storage_Full_DINE.json +++ b/built-in-policies/policyDefinitions/Security Center/MDC_Microsoft_Defender_For_Storage_Full_DINE.json @@ -4,9 +4,9 @@ "policyType": "BuiltIn", "mode": "All", "description": "Microsoft Defender for Storage is an Azure-native layer of security intelligence that detects potential threats to your storage accounts.\nThis policy will enable all Defender for Storage capabilities; Activity Monitoring, Malware Scanning and Sensitive Data Threat Detection. To learn more about Defender for Storage capabilities and benefits, visit aka.ms/DefenderForStorage.", - "version": "1.2.0", + "version": "1.3.0", "metadata": { - "version": "1.2.0", + "version": "1.3.0", "category": "Security Center" }, "parameters": { @@ -135,7 +135,7 @@ }, "template": { "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", - "contentVersion": "1.1.0.0", + "contentVersion": "1.2.0.0", "parameters": { "isOnUploadMalwareScanningEnabled": { "type": "String" @@ -153,6 +153,7 @@ "type": "Microsoft.Security/pricings", "apiVersion": "2023-01-01", "name": "StorageAccounts", + "condition": "[equals(parameters('isOnUploadMalwareScanningEnabled'), 'true')]", "properties": { "subPlan": "DefenderForStorageV2", "pricingTier": "Standard", @@ -170,6 +171,26 @@ } ] } + }, + { + "type": "Microsoft.Security/pricings", + "apiVersion": "2023-01-01", + "name": "StorageAccounts", + "condition": "[equals(parameters('isOnUploadMalwareScanningEnabled'), 'false')]", + "properties": { + "subPlan": "DefenderForStorageV2", + "pricingTier": "Standard", + "extensions": [ + { + "name": "OnUploadMalwareScanning", + "isEnabled": "[parameters('isOnUploadMalwareScanningEnabled')]" + }, + { + "name": "SensitiveDataDiscovery", + "isEnabled": "[parameters('isSensitiveDataDiscoveryEnabled')]" + } + ] + } } ], "outputs": {} @@ -180,6 +201,7 @@ } }, "versions": [ + "1.3.0", "1.2.0", "1.1.0" ] diff --git a/built-in-policies/policySetDefinitions/Monitoring/AzureMonitor_DiagSettings_eventHub_allLogs.json b/built-in-policies/policySetDefinitions/Monitoring/AzureMonitor_DiagSettings_eventHub_allLogs.json new file mode 100644 index 000000000..34640f74f --- /dev/null +++ b/built-in-policies/policySetDefinitions/Monitoring/AzureMonitor_DiagSettings_eventHub_allLogs.json @@ -0,0 +1,3858 @@ +{ + "properties": { + "displayName": "Enable allLogs category group resource logging for supported resources to Event Hub", + "description": "Resource logs should be enabled to track activities and events that take place on your resources and give you visibility and insights into any changes that occur. This initiative deploys diagnostic setting using the allLogs category group to route logs to Event Hub for all supported resources.", + "policyType": "BuiltIn", + "version": "1.0.0", + "metadata": { + "category": "Monitoring", + "version": "1.0.0" + }, + "parameters": { + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Enable or disable the execution of the policy" + }, + "allowedValues": [ + "DeployIfNotExists", + "AuditIfNotExists", + "Disabled" + ], + "defaultValue": "DeployIfNotExists" + }, + "diagnosticSettingName": { + "type": "string", + "metadata": { + "displayName": "Diagnostic Setting Name", + "description": "Diagnostic Setting Name" + }, + "defaultValue": "setByPolicy-EventHub" + }, + "resourceLocation": { + "type": "string", + "metadata": { + "displayName": "Resource Location", + "description": "Resource Location must be in the same location as the Event Hub Namespace.", + "strongType": "location" + } + }, + "eventHubAuthorizationRuleId": { + "type": "String", + "metadata": { + "displayName": "Event Hub Authorization Rule Id", + "description": "Event Hub Authorization Rule Id - the authorization rule needs to be at Event Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization rule}", + "strongType": "Microsoft.EventHub/Namespaces/AuthorizationRules", + "assignPermissions": true + } + }, + "eventHubName": { + "type": "string", + "metadata": { + "displayName": "Event Hub Name", + "description": "Event Hub Name" + }, + "defaultValue": "Monitoring" + }, + "resourceTypeList": { + "type": "array", + "metadata": { + "displayName": "Resource Types", + "description": "List of Resource Types to be evaluated for diagnostic setting existence." + }, + "allowedValues": [ + "microsoft.aad/domainservices", + "microsoft.agfoodplatform/farmbeats", + "microsoft.analysisservices/servers", + "microsoft.apimanagement/service", + "microsoft.app/managedenvironments", + "microsoft.appconfiguration/configurationstores", + "microsoft.appplatform/spring", + "microsoft.attestation/attestationproviders", + "microsoft.automation/automationaccounts", + "microsoft.autonomousdevelopmentplatform/workspaces", + "microsoft.avs/privateclouds", + "microsoft.azureplaywrightservice/accounts", + "microsoft.azuresphere/catalogs", + "microsoft.batch/batchaccounts", + "microsoft.botservice/botservices", + "microsoft.cache/redis", + "microsoft.cache/redisenterprise/databases", + "microsoft.cdn/cdnwebapplicationfirewallpolicies", + "microsoft.cdn/profiles", + "microsoft.cdn/profiles/endpoints", + "microsoft.chaos/experiments", + "microsoft.classicnetwork/networksecuritygroups", + "microsoft.cloudtest/hostedpools", + "microsoft.codesigning/codesigningaccounts", + "microsoft.cognitiveservices/accounts", + "microsoft.communication/communicationservices", + "microsoft.community/communitytrainings", + "microsoft.confidentialledger/managedccfs", + "microsoft.connectedcache/enterprisemcccustomers", + "microsoft.connectedcache/ispcustomers", + "microsoft.containerinstance/containergroups", + "microsoft.containerregistry/registries", + "microsoft.customproviders/resourceproviders", + "microsoft.d365customerinsights/instances", + "microsoft.dashboard/grafana", + "microsoft.databricks/workspaces", + "microsoft.datafactory/factories", + "microsoft.datalakeanalytics/accounts", + "microsoft.datalakestore/accounts", + "microsoft.dataprotection/backupvaults", + "microsoft.datashare/accounts", + "microsoft.dbformariadb/servers", + "microsoft.dbformysql/flexibleservers", + "microsoft.dbformysql/servers", + "microsoft.dbforpostgresql/flexibleservers", + "microsoft.dbforpostgresql/servergroupsv2", + "microsoft.dbforpostgresql/servers", + "microsoft.desktopvirtualization/applicationgroups", + "microsoft.desktopvirtualization/hostpools", + "microsoft.desktopvirtualization/scalingplans", + "microsoft.desktopvirtualization/workspaces", + "microsoft.devcenter/devcenters", + "microsoft.devices/iothubs", + "microsoft.devices/provisioningservices", + "microsoft.digitaltwins/digitaltwinsinstances", + "microsoft.documentdb/cassandraclusters", + "microsoft.documentdb/databaseaccounts", + "microsoft.documentdb/mongoclusters", + "microsoft.eventgrid/domains", + "microsoft.eventgrid/partnernamespaces", + "microsoft.eventgrid/partnertopics", + "microsoft.eventgrid/systemtopics", + "microsoft.eventgrid/topics", + "microsoft.eventhub/namespaces", + "microsoft.experimentation/experimentworkspaces", + "microsoft.healthcareapis/services", + "microsoft.healthcareapis/workspaces/dicomservices", + "microsoft.healthcareapis/workspaces/fhirservices", + "microsoft.healthcareapis/workspaces/iotconnectors", + "microsoft.insights/autoscalesettings", + "microsoft.insights/components", + "microsoft.insights/datacollectionrules", + "microsoft.keyvault/managedhsms", + "microsoft.keyvault/vaults", + "microsoft.kusto/clusters", + "microsoft.loadtestservice/loadtests", + "microsoft.logic/integrationaccounts", + "microsoft.logic/workflows", + "microsoft.machinelearningservices/registries", + "microsoft.machinelearningservices/workspaces", + "microsoft.machinelearningservices/workspaces/onlineendpoints", + "microsoft.managednetworkfabric/networkdevices", + "microsoft.media/mediaservices", + "microsoft.media/videoanalyzers", + "microsoft.media/mediaservices/liveevents", + "microsoft.media/mediaservices/streamingendpoints", + "microsoft.netapp/netappaccounts/capacitypools/volumes", + "microsoft.network/applicationgateways", + "microsoft.network/azurefirewalls", + "microsoft.network/bastionhosts", + "microsoft.network/dnsresolverpolicies", + "microsoft.network/expressroutecircuits", + "microsoft.network/frontdoors", + "microsoft.network/loadbalancers", + "microsoft.network/networkmanagers", + "microsoft.network/networkmanagers/ipampools", + "microsoft.network/networksecuritygroups", + "microsoft.network/networksecurityperimeters", + "microsoft.network/p2svpngateways", + "microsoft.network/publicipaddresses", + "microsoft.network/publicipprefixes", + "microsoft.network/trafficmanagerprofiles", + "microsoft.network/virtualnetworkgateways", + "microsoft.network/virtualnetworks", + "microsoft.network/vpngateways", + "microsoft.networkanalytics/dataproducts", + "microsoft.networkcloud/baremetalmachines", + "microsoft.networkcloud/clusters", + "microsoft.networkcloud/storageappliances", + "microsoft.networkfunction/azuretrafficcollectors", + "microsoft.notificationhubs/namespaces", + "microsoft.notificationhubs/namespaces/notificationhubs", + "microsoft.openenergyplatform/energyservices", + "microsoft.operationalinsights/workspaces", + "microsoft.powerbi/tenants/workspaces", + "microsoft.powerbidedicated/capacities", + "microsoft.purview/accounts", + "microsoft.recoveryservices/vaults", + "microsoft.relay/namespaces", + "microsoft.search/searchservices", + "microsoft.servicebus/namespaces", + "microsoft.servicenetworking/trafficcontrollers", + "microsoft.signalrservice/signalr", + "microsoft.signalrservice/webpubsub", + "microsoft.sql/managedinstances", + "microsoft.sql/managedinstances/databases", + "microsoft.sql/servers/databases", + "microsoft.storagecache/caches", + "microsoft.storagemover/storagemovers", + "microsoft.streamanalytics/streamingjobs", + "microsoft.synapse/workspaces", + "microsoft.synapse/workspaces/bigdatapools", + "microsoft.synapse/workspaces/kustopools", + "microsoft.synapse/workspaces/scopepools", + "microsoft.synapse/workspaces/sqlpools", + "microsoft.timeseriesinsights/environments", + "microsoft.timeseriesinsights/environments/eventsources", + "microsoft.videoindexer/accounts", + "microsoft.web/hostingenvironments", + "microsoft.workloads/sapvirtualinstances" + ], + "defaultValue": [ + "microsoft.aad/domainservices", + "microsoft.agfoodplatform/farmbeats", + "microsoft.analysisservices/servers", + "microsoft.apimanagement/service", + "microsoft.app/managedenvironments", + "microsoft.appconfiguration/configurationstores", + "microsoft.appplatform/spring", + "microsoft.attestation/attestationproviders", + "microsoft.automation/automationaccounts", + "microsoft.autonomousdevelopmentplatform/workspaces", + "microsoft.avs/privateclouds", + "microsoft.azureplaywrightservice/accounts", + "microsoft.azuresphere/catalogs", + "microsoft.batch/batchaccounts", + "microsoft.botservice/botservices", + "microsoft.cache/redis", + "microsoft.cache/redisenterprise/databases", + "microsoft.cdn/cdnwebapplicationfirewallpolicies", + "microsoft.cdn/profiles", + "microsoft.cdn/profiles/endpoints", + "microsoft.chaos/experiments", + "microsoft.classicnetwork/networksecuritygroups", + "microsoft.cloudtest/hostedpools", + "microsoft.codesigning/codesigningaccounts", + "microsoft.cognitiveservices/accounts", + "microsoft.communication/communicationservices", + "microsoft.community/communitytrainings", + "microsoft.confidentialledger/managedccfs", + "microsoft.connectedcache/enterprisemcccustomers", + "microsoft.connectedcache/ispcustomers", + "microsoft.containerinstance/containergroups", + "microsoft.containerregistry/registries", + "microsoft.customproviders/resourceproviders", + "microsoft.d365customerinsights/instances", + "microsoft.dashboard/grafana", + "microsoft.databricks/workspaces", + "microsoft.datafactory/factories", + "microsoft.datalakeanalytics/accounts", + "microsoft.datalakestore/accounts", + "microsoft.dataprotection/backupvaults", + "microsoft.datashare/accounts", + "microsoft.dbformariadb/servers", + "microsoft.dbformysql/flexibleservers", + "microsoft.dbformysql/servers", + "microsoft.dbforpostgresql/flexibleservers", + "microsoft.dbforpostgresql/servergroupsv2", + "microsoft.dbforpostgresql/servers", + "microsoft.desktopvirtualization/applicationgroups", + "microsoft.desktopvirtualization/hostpools", + "microsoft.desktopvirtualization/scalingplans", + "microsoft.desktopvirtualization/workspaces", + "microsoft.devcenter/devcenters", + "microsoft.devices/iothubs", + "microsoft.devices/provisioningservices", + "microsoft.digitaltwins/digitaltwinsinstances", + "microsoft.documentdb/cassandraclusters", + "microsoft.documentdb/databaseaccounts", + "microsoft.documentdb/mongoclusters", + "microsoft.eventgrid/domains", + "microsoft.eventgrid/partnernamespaces", + "microsoft.eventgrid/partnertopics", + "microsoft.eventgrid/systemtopics", + "microsoft.eventgrid/topics", + "microsoft.eventhub/namespaces", + "microsoft.experimentation/experimentworkspaces", + "microsoft.healthcareapis/services", + "microsoft.healthcareapis/workspaces/dicomservices", + "microsoft.healthcareapis/workspaces/fhirservices", + "microsoft.healthcareapis/workspaces/iotconnectors", + "microsoft.insights/autoscalesettings", + "microsoft.insights/components", + "microsoft.insights/datacollectionrules", + "microsoft.keyvault/managedhsms", + "microsoft.keyvault/vaults", + "microsoft.kusto/clusters", + "microsoft.loadtestservice/loadtests", + "microsoft.logic/integrationaccounts", + "microsoft.logic/workflows", + "microsoft.machinelearningservices/registries", + "microsoft.machinelearningservices/workspaces", + "microsoft.machinelearningservices/workspaces/onlineendpoints", + "microsoft.managednetworkfabric/networkdevices", + "microsoft.media/mediaservices", + "microsoft.media/videoanalyzers", + "microsoft.media/mediaservices/liveevents", + "microsoft.media/mediaservices/streamingendpoints", + "microsoft.netapp/netappaccounts/capacitypools/volumes", + "microsoft.network/applicationgateways", + "microsoft.network/azurefirewalls", + "microsoft.network/bastionhosts", + "microsoft.network/dnsresolverpolicies", + "microsoft.network/expressroutecircuits", + "microsoft.network/frontdoors", + "microsoft.network/loadbalancers", + "microsoft.network/networkmanagers", + "microsoft.network/networkmanagers/ipampools", + "microsoft.network/networksecuritygroups", + "microsoft.network/networksecurityperimeters", + "microsoft.network/p2svpngateways", + "microsoft.network/publicipaddresses", + "microsoft.network/publicipprefixes", + "microsoft.network/trafficmanagerprofiles", + "microsoft.network/virtualnetworkgateways", + "microsoft.network/virtualnetworks", + "microsoft.network/vpngateways", + "microsoft.networkanalytics/dataproducts", + "microsoft.networkcloud/baremetalmachines", + "microsoft.networkcloud/clusters", + "microsoft.networkcloud/storageappliances", + "microsoft.networkfunction/azuretrafficcollectors", + "microsoft.notificationhubs/namespaces", + "microsoft.notificationhubs/namespaces/notificationhubs", + "microsoft.openenergyplatform/energyservices", + "microsoft.operationalinsights/workspaces", + "microsoft.powerbi/tenants/workspaces", + "microsoft.powerbidedicated/capacities", + "microsoft.purview/accounts", + "microsoft.recoveryservices/vaults", + "microsoft.relay/namespaces", + "microsoft.search/searchservices", + "microsoft.servicebus/namespaces", + "microsoft.servicenetworking/trafficcontrollers", + "microsoft.signalrservice/signalr", + "microsoft.signalrservice/webpubsub", + "microsoft.sql/managedinstances", + "microsoft.sql/managedinstances/databases", + "microsoft.sql/servers/databases", + "microsoft.storagecache/caches", + "microsoft.storagemover/storagemovers", + "microsoft.streamanalytics/streamingjobs", + "microsoft.synapse/workspaces", + "microsoft.synapse/workspaces/bigdatapools", + "microsoft.synapse/workspaces/kustopools", + "microsoft.synapse/workspaces/scopepools", + "microsoft.synapse/workspaces/sqlpools", + "microsoft.timeseriesinsights/environments", + "microsoft.timeseriesinsights/environments/eventsources", + "microsoft.videoindexer/accounts", + "microsoft.web/hostingenvironments", + "microsoft.workloads/sapvirtualinstances" + ] + } + }, + "policyDefinitions": [ + { + "policyDefinitionReferenceId": "aad-domainservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/257954d9-4adf-410b-9751-3bb22fe9c180", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.aad/domainservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "agfoodplatform-farmbeats", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a9ebdeda-251a-4311-92be-5167d73b1682", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.agfoodplatform/farmbeats'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "analysisservices-servers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3227dfd8-3536-4336-94c9-78633be6baa2", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.analysisservices/servers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "apimanagement-service", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3a8ff864-d881-44ce-bed3-0c63ede634cb", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.apimanagement/service'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "app-managedenvironments", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3893777a-aaf0-4b74-b08a-14ca9e5a9608", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.app/managedenvironments'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "appconfiguration-configurationstores", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8d0726a6-abae-4b04-9d2e-1f2f67a47e6d", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.appconfiguration/configurationstores'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "appplatform-spring", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/abb62520-ee66-4bdb-96d3-49ad98c66131", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.appplatform/spring'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "attestation-attestationproviders", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e488a548-7afd-43a7-a903-2a6dd36e7504", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.attestation/attestationproviders'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "automation-automationaccounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d9f11fea-dd45-46aa-8908-b7a146f1e543", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.automation/automationaccounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "autonomousdevelopmentplatform-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ba00f5fb-98f7-4542-b88a-16c5ce44f26a", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.autonomousdevelopmentplatform/workspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "avs-privateclouds", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/73fb42d8-b57f-41cd-a840-8f4dedb1dd27", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.avs/privateclouds'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "azureplaywrightservice-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e2526c67-0363-4da9-96f8-a95d746cf60b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.azureplaywrightservice/accounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "azuresphere-catalogs", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8181847d-3422-4030-b815-481934740b63", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.azuresphere/catalogs'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "batch-batchaccounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/90425e88-1eab-420c-964e-fc1dc79833a6", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.batch/batchaccounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "botservice-botservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ca05d7f2-6625-4cc3-a65a-4931b45ff139", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.botservice/botservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "cache-redis", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a142867f-3142-4ac6-b952-ab950a29fca5", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cache/redis'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "cache-redisenterprise-databases", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/145ff119-bfcf-443a-834c-b59859ec3ee7", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cache/redisenterprise/databases'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "cdn-cdnwebapplicationfirewallpolicies", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/37d5d366-8544-498a-9106-00185b29a9e3", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cdn/cdnwebapplicationfirewallpolicies'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "cdn-profiles", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/76539a09-021e-4300-953b-4c6018ac26dc", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cdn/profiles'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "cdn-profiles-endpoints", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4ce6d386-fc8e-4ac4-9bff-e5859625cea4", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cdn/profiles/endpoints'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "chaos-experiments", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/35806bc0-0260-4642-bae7-0ed677b3da44", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.chaos/experiments'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "classicnetwork-networksecuritygroups", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6308bf75-8340-4bab-b2ec-2f5000697af4", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.classicnetwork/networksecuritygroups'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "cloudtest-hostedpools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/20e491a1-11fe-4d11-ab4e-a81edd23672e", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cloudtest/hostedpools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "codesigning-codesigningaccounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3d9b8097-326d-4675-8cff-cce4580c9208", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.codesigning/codesigningaccounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "cognitiveservices-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0628b917-d4b4-4af5-bc2b-b4f87cd173ab", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cognitiveservices/accounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "communication-communicationservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9756f174-ca74-4d7a-a56e-7104d8a954b0", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.communication/communicationservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "community-communitytrainings", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bdef6e51-210f-4dc3-87b4-eef30f2e6a17", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.community/communitytrainings'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "confidentialledger-managedccfs", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8e29fe36-d794-4c55-87d6-5a206031dde2", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.confidentialledger/managedccfs'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "connectedcache-enterprisemcccustomers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ccdd9d7c-2bb6-465b-8ea1-5584b4af072e", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.connectedcache/enterprisemcccustomers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "connectedcache-ispcustomers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2d8b0f41-9850-4bac-b63b-96a882a0e683", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.connectedcache/ispcustomers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "containerinstance-containergroups", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/60ad0a9f-f760-45ff-ab94-4c64d7439f18", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.containerinstance/containergroups'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "containerregistry-registries", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9ba29e83-863d-4fec-81d0-16dd87067cc3", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.containerregistry/registries'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "customproviders-resourceproviders", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ec51b91e-e03d-4435-b6e7-dcaffe6ba5c0", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.customproviders/resourceproviders'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "d365customerinsights-instances", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f3977509-4420-4dfa-b1c9-2ab38dfd530f", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.d365customerinsights/instances'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "dashboard-grafana", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f48c1843-fc88-47c1-9b01-4527c76c890a", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dashboard/grafana'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "databricks-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6248cb7c-e485-42ad-ba20-b1ee8fba7674", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.databricks/workspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "datafactory-factories", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/144aa510-91a0-4de9-9800-43a7ef5e947f", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.datafactory/factories'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "datalakeanalytics-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d4d93413-9560-4252-a16d-b8c3bbaf5baf", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.datalakeanalytics/accounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "datalakestore-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/621d8969-4918-45e7-954b-2fb0b42e7059", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.datalakestore/accounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "dataprotection-backupvaults", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/78d285d5-f767-43f8-aa36-4616daaf9d51", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dataprotection/backupvaults'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "datashare-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/77c56019-5c71-4d33-9ce3-7a817f2bc7fa", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.datashare/accounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "dbformariadb-servers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1aa5a06a-0cee-4598-8200-94755d500381", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dbformariadb/servers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "dbformysql-flexibleservers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/be3ddb6b-c328-4ecd-91e8-c2804868ea9c", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dbformysql/flexibleservers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "dbformysql-servers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3ec48f10-33fc-40d2-aaf2-028c4f7bbd02", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dbformysql/servers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "dbforpostgresql-flexibleservers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bd0079c6-6f2d-42f4-9cee-e23930968f10", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dbforpostgresql/flexibleservers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "dbforpostgresql-servergroupsv2", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e1598217-5ff1-4978-b51d-f0238e100019", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dbforpostgresql/servergroupsv2'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "dbforpostgresql-servers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3d7d0cc7-bd72-4f41-bf55-0be57faa3883", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dbforpostgresql/servers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "desktopvirtualization-applicationgroups", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3372b9c2-d179-4190-9f0c-e6f6304d0e93", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.desktopvirtualization/applicationgroups'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "desktopvirtualization-hostpools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/059e6dd0-544a-4c93-abad-b3ad77667339", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.desktopvirtualization/hostpools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "desktopvirtualization-scalingplans", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/dcb324b0-3bfa-4df4-b476-64122bde219e", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.desktopvirtualization/scalingplans'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "desktopvirtualization-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b4545446-0cac-4af5-b591-61544b66e802", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.desktopvirtualization/workspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "devcenter-devcenters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5305ea79-c247-456a-bdbd-dc35cef62ce1", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.devcenter/devcenters'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "devices-iothubs", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/dfbfceaa-14b2-4a90-a679-d169fa6a6a38", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.devices/iothubs'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "devices-provisioningservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/13bf624e-fe24-40f0-9a7c-066e28a50871", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.devices/provisioningservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "digitaltwins-digitaltwinsinstances", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d16cdb9f-e2a8-4002-88f6-9eeaea1766f7", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.digitaltwins/digitaltwinsinstances'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "documentdb-cassandraclusters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c1c0dd3c-6354-4265-a88b-801f84649944", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.documentdb/cassandraclusters'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "documentdb-databaseaccounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/322b6192-a99b-4ab6-9b40-43ca19dcd0d9", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.documentdb/databaseaccounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "documentdb-mongoclusters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d8a9593e-791e-4fd7-9b22-a75b76e5de17", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.documentdb/mongoclusters'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "eventgrid-domains", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a81eb966-6696-46b1-9153-bed01569a7d0", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/domains'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "eventgrid-partnernamespaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f6d5d5d5-0fa9-4257-b820-69c35016c973", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/partnernamespaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "eventgrid-partnertopics", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/99b76532-523c-44da-8d28-3af059fd7fbb", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/partnertopics'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "eventgrid-systemtopics", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9cbc4c60-0db8-483c-999b-0f017a01a56b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/systemtopics'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "eventgrid-topics", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f5094957-e0f7-4af2-9e14-13d60141dc4a", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/topics'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "eventhub-namespaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/480851ae-9ff3-49d1-904c-b5bd6f83f1ec", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventhub/namespaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "experimentation-experimentworkspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cf6ff94d-c483-4491-976a-eb784101217a", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.experimentation/experimentworkspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "healthcareapis-services", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f231d9f4-9110-40eb-979e-e4eac6602be2", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.healthcareapis/services'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "healthcareapis-workspaces-dicomservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/db20d5eb-782b-4c4d-b668-06816ec72c58", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.healthcareapis/workspaces/dicomservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "healthcareapis-workspaces-fhirservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e260a121-c160-4da3-8a0f-e2c0ff6c561e", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.healthcareapis/workspaces/fhirservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "healthcareapis-workspaces-iotconnectors", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/73baf464-93bb-450f-bda5-209c16d28dc3", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.healthcareapis/workspaces/iotconnectors'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "insights-autoscalesettings", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ac27709a-8e3a-4abf-8122-877af1dd9209", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.insights/autoscalesettings'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "insights-components", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1859cd03-7f77-495d-a0ce-336a36a6830d", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.insights/components'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "insights-datacollectionrules", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cd0a772a-62ba-4295-8311-d6710ebe967b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.insights/datacollectionrules'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "keyvault-managedhsms", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1abe42e1-a726-4dee-94c2-79f364dac9b7", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.keyvault/managedhsms'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "keyvault-vaults", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/71153be3-4742-4aae-9aec-150f7589311b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.keyvault/vaults'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "kusto-clusters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/aaa4560d-9580-4804-a5e5-b9ffb469d49e", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.kusto/clusters'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "loadtestservice-loadtests", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/68d95589-2f07-42e3-ae6d-80a2ae3edbc4", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.loadtestservice/loadtests'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "logic-integrationaccounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/da9b245a-05a9-4c2a-acb3-5afe62658776", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.logic/integrationaccounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "logic-workflows", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/58e22268-dacf-4b7f-b445-338a7e56d23c", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.logic/workflows'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "machinelearningservices-registries", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/12000b3e-e38b-4bef-9098-38785f06ea32", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.machinelearningservices/registries'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "machinelearningservices-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ae48c709-d2b4-4fad-8c5c-838524130aa4", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.machinelearningservices/workspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "machinelearningservices-workspaces-onlineendpoints", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cc789f91-3e63-4cfb-86f4-87565055f269", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.machinelearningservices/workspaces/onlineendpoints'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "managednetworkfabric-networkdevices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/adeec880-527c-4def-a2bf-3053be70eef8", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.managednetworkfabric/networkdevices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "media-mediaservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8d253bba-a338-4fd9-9752-6b6edadca1eb", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/mediaservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "media-videoanalyzers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/792f8b74-dc05-44fd-b90d-340a097b80e6", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/videoanalyzers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "media-mediaservices-liveevents", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5d7409c0-fb8e-4052-9969-ef09f12fd166", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/mediaservices/liveevents'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "media-mediaservices-streamingendpoints", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/944eae3e-6b16-4864-86e1-1b23d58386d5", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/mediaservices/streamingendpoints'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "netapp-netappaccounts-capacitypools-volumes", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a285df35-0164-4f4d-9e04-c39056742c55", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.netapp/netappaccounts/capacitypools/volumes'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-applicationgateways", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/11638078-a29c-4cf3-ad7f-775f78327425", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/applicationgateways'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-azurefirewalls", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/339855ce-39c1-4a70-adc9-103ea7aac99f", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/azurefirewalls'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-bastionhosts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6b2899d8-5fdf-4ade-ba59-f1f82664877b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/bastionhosts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-dnsresolverpolicies", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0fdc6116-c747-449c-b9cc-330fcd4c5c9c", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/dnsresolverpolicies'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-expressroutecircuits", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/93319447-e347-406b-953f-618c3b599554", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/expressroutecircuits'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-frontdoors", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/eb5a4c26-04cb-4ab1-81cb-726dc58df772", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/frontdoors'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-loadbalancers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ba0ba89c-1137-407f-ae7a-19152ea7ae82", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/loadbalancers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-networkmanagers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c29fe1b2-c0b0-4d92-a988-84b484801707", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/networkmanagers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-networkmanagers-ipampools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a08af17e-c2a3-478e-a819-94839ef02b32", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/networkmanagers/ipampools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-networksecuritygroups", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/601e350d-405c-41d0-a886-72c283f8fab2", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/networksecuritygroups'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-networksecurityperimeters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/20a921eb-1c4b-4bb7-a78f-6653ad293dba", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/networksecurityperimeters'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-p2svpngateways", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b9b976cc-59ef-468a-807e-19afa2ebfd52", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/p2svpngateways'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-publicipaddresses", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fc602c00-2ce3-4556-b615-fa4159517103", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/publicipaddresses'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-publicipprefixes", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2cc39a57-5106-4d41-b872-55c2b9d7b729", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/publicipprefixes'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-trafficmanagerprofiles", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2db34cad-25ef-48e3-a787-c2cd36434cd7", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/trafficmanagerprofiles'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-virtualnetworkgateways", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6ccd32f6-0a9a-40cf-9c5b-6cfd6aba33e9", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/virtualnetworkgateways'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-virtualnetworks", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/40ce1496-89c2-40cf-80e5-3c4687d2ee4b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/virtualnetworks'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-vpngateways", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ca09affa-60d6-4cef-9037-b7372e1ac44f", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/vpngateways'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "networkanalytics-dataproducts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5360664a-5821-4f43-8988-3f0ed8f3f8a5", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.networkanalytics/dataproducts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "networkcloud-baremetalmachines", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0dac4c0b-0ca4-4c6e-9a09-61917873b3b0", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.networkcloud/baremetalmachines'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "networkcloud-clusters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/64948b6b-409d-4af2-970f-3b80fea408c1", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.networkcloud/clusters'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "networkcloud-storageappliances", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0b726841-c441-44ed-a2cc-d321e3be3ed7", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.networkcloud/storageappliances'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "networkfunction-azuretrafficcollectors", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a6dd4d00-283d-4765-b3d1-44ace2ccacda", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.networkfunction/azuretrafficcollectors'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "notificationhubs-namespaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4891dace-710e-40bd-b81f-6a0b9871b50b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.notificationhubs/namespaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "notificationhubs-namespaces-notificationhubs", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5a69fd36-760e-4a65-a621-836f1159e304", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.notificationhubs/namespaces/notificationhubs'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "openenergyplatform-energyservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8af74447-9495-4245-8e49-f74723dcd231", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.openenergyplatform/energyservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "operationalinsights-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a853abad-dfa4-4bf5-aaa1-04cb10c02d23", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.operationalinsights/workspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "powerbi-tenants-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/76e7a3b8-3822-4ca2-92d8-c20616fd870b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.powerbi/tenants/workspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "powerbidedicated-capacities", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/668e9597-4ccc-452f-80be-e9dd5b2ab897", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.powerbidedicated/capacities'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "purview-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6b4b3d79-2eeb-4612-b3d1-99ef609ffa4e", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.purview/accounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "recoveryservices-vaults", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e92686fd-65f0-420f-a52b-7da14f3cef90", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.recoveryservices/vaults'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "relay-namespaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/34705075-71e2-480c-a9cb-6e9387f47f0f", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.relay/namespaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "search-searchservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/971199b6-1971-4d3e-85b0-fa7639044679", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.search/searchservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "servicebus-namespaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e7c86682-34c1-488a-9aab-9cb279207992", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.servicebus/namespaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "servicenetworking-trafficcontrollers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2308e22a-85e9-431d-8c47-36072dfa64b5", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.servicenetworking/trafficcontrollers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "signalrservice-signalr", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fc744b31-a930-4eb5-bc06-e81f98bf7214", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.signalrservice/signalr'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "signalrservice-webpubsub", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3d034ef2-001c-46f6-a47b-e6e4a74ff89b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.signalrservice/webpubsub'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "sql-managedinstances", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5f6f2aba-e57f-42ed-9aeb-ffa7321a56db", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.sql/managedinstances'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "sql-managedinstances-databases", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a05c2daf-be1f-4d2c-8a12-b3627d477b44", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.sql/managedinstances/databases'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "sql-servers-databases", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9e6aee71-3781-4acd-bba7-aac4fb067dfa", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.sql/servers/databases'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "storagecache-caches", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6b80a35d-1e9a-43ac-9e0b-4519ce9f09b4", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.storagecache/caches'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "storagemover-storagemovers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/08240c20-e48f-47d9-9305-2a8c4da75a3e", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.storagemover/storagemovers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "streamanalytics-streamingjobs", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/590b6105-4715-4e8b-8049-c5a4ae07d8e9", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.streamanalytics/streamingjobs'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e9b1fed8-35a2-47d0-b8aa-3834f5032862", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces-bigdatapools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/47f4c5ae-1b43-4620-bcbd-65e2ee6fb7c8", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces/bigdatapools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces-kustopools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/63f9b4b2-de99-4b16-ad94-1a5464ac4f7d", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces/kustopools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces-scopepools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a12e0815-0735-48d9-b5b3-8a3b60a85b86", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces/scopepools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces-sqlpools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/72d254bb-d0ed-42f2-9160-6b11b65b599c", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces/sqlpools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "timeseriesinsights-environments", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a21ac20a-4dd3-40e9-8036-b3351ecf9319", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.timeseriesinsights/environments'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "timeseriesinsights-environments-eventsources", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/02f64cac-bab0-4950-bb95-51f2d3970efa", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.timeseriesinsights/environments/eventsources'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "videoindexer-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5e6697bc-9d6d-4de9-95f9-898f130372df", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.videoindexer/accounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "web-hostingenvironments", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/58cb2d8e-623c-4557-bb4e-0b64cb41ec55", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.web/hostingenvironments'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "workloads-sapvirtualinstances", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ffe49e3d-50dd-4137-8fe5-6877c4384b69", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.workloads/sapvirtualinstances'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + } + ], + "versions": [ + "1.0.0" + ] + }, + "name": "85175a36-2f12-419a-96b4-18d5b0096531", + "id": "/providers/Microsoft.Authorization/policySetDefinitions/85175a36-2f12-419a-96b4-18d5b0096531" +} \ No newline at end of file diff --git a/built-in-policies/policySetDefinitions/Monitoring/AzureMonitor_DiagSettings_eventHub_audit.json b/built-in-policies/policySetDefinitions/Monitoring/AzureMonitor_DiagSettings_eventHub_audit.json index 94add2cc1..f8203f7b9 100644 --- a/built-in-policies/policySetDefinitions/Monitoring/AzureMonitor_DiagSettings_eventHub_audit.json +++ b/built-in-policies/policySetDefinitions/Monitoring/AzureMonitor_DiagSettings_eventHub_audit.json @@ -1,14 +1,12 @@ { - "name": "1020d527-2764-4230-92cc-7035e4fcf8a7", - "id": "/providers/Microsoft.Authorization/policySetDefinitions/1020d527-2764-4230-92cc-7035e4fcf8a7", "properties": { "displayName": "Enable audit category group resource logging for supported resources to Event Hub", "description": "Resource logs should be enabled to track activities and events that take place on your resources and give you visibility and insights into any changes that occur. This initiative deploys diagnostic setting using the audit category group to route logs to Event Hub for all supported resources", "policyType": "BuiltIn", - "version": "1.0.0", + "version": "1.1.0", "metadata": { "category": "Monitoring", - "version": "1.0.0" + "version": "1.1.0" }, "parameters": { "effect": { @@ -64,78 +62,175 @@ "description": "List of Resource Types to be evaluated for diagnostic setting existence." }, "allowedValues": [ + "microsoft.aad/domainservices", "microsoft.agfoodplatform/farmbeats", "microsoft.apimanagement/service", + "microsoft.app/managedenvironments", "microsoft.appconfiguration/configurationstores", "microsoft.attestation/attestationproviders", "microsoft.automation/automationaccounts", "microsoft.avs/privateclouds", + "microsoft.azureplaywrightservice/accounts", + "microsoft.azuresphere/catalogs", + "microsoft.batch/batchaccounts", "microsoft.cache/redis", + "microsoft.cache/redisenterprise/databases", "microsoft.cdn/profiles", + "microsoft.chaos/experiments", + "microsoft.codesigning/codesigningaccounts", "microsoft.cognitiveservices/accounts", + "microsoft.community/communitytrainings", + "microsoft.confidentialledger/managedccfs", "microsoft.containerregistry/registries", + "microsoft.dashboard/grafana", + "microsoft.dbformysql/flexibleservers", + "microsoft.dbforpostgresql/flexibleservers", + "microsoft.devcenter/devcenters", "microsoft.devices/iothubs", - "microsoft.eventgrid/topics", + "microsoft.documentdb/cassandraclusters", + "microsoft.documentdb/databaseaccounts", + "microsoft.documentdb/mongoclusters", "microsoft.eventgrid/domains", "microsoft.eventgrid/partnernamespaces", + "microsoft.eventgrid/topics", "microsoft.eventhub/namespaces", - "microsoft.keyvault/vaults", "microsoft.keyvault/managedhsms", + "microsoft.keyvault/vaults", + "microsoft.kusto/clusters", + "microsoft.loadtestservice/loadtests", + "microsoft.machinelearningservices/registries", "microsoft.machinelearningservices/workspaces", "microsoft.media/mediaservices", "microsoft.media/videoanalyzers", + "microsoft.media/mediaservices/liveevents", + "microsoft.media/mediaservices/streamingendpoints", "microsoft.netapp/netappaccounts/capacitypools/volumes", + "microsoft.network/bastionhosts", + "microsoft.network/frontdoors", + "microsoft.network/networkmanagers", + "microsoft.network/networkmanagers/ipampools", + "microsoft.network/p2svpngateways", "microsoft.network/publicipaddresses", + "microsoft.network/publicipprefixes", "microsoft.network/virtualnetworkgateways", - "microsoft.network/p2svpngateways", - "microsoft.network/frontdoors", - "microsoft.network/bastionhosts", + "microsoft.networkanalytics/dataproducts", + "microsoft.notificationhubs/namespaces", + "microsoft.notificationhubs/namespaces/notificationhubs", "microsoft.operationalinsights/workspaces", "microsoft.purview/accounts", + "microsoft.search/searchservices", "microsoft.servicebus/namespaces", "microsoft.signalrservice/signalr", "microsoft.signalrservice/webpubsub", + "microsoft.sql/managedinstances", "microsoft.sql/servers/databases", - "microsoft.sql/managedinstances" + "microsoft.synapse/workspaces", + "microsoft.synapse/workspaces/bigdatapools", + "microsoft.synapse/workspaces/kustopools", + "microsoft.synapse/workspaces/scopepools", + "microsoft.synapse/workspaces/sqlpools", + "microsoft.web/hostingenvironments", + "microsoft.workloads/sapvirtualinstances" ], "defaultValue": [ + "microsoft.aad/domainservices", "microsoft.agfoodplatform/farmbeats", "microsoft.apimanagement/service", + "microsoft.app/managedenvironments", "microsoft.appconfiguration/configurationstores", "microsoft.attestation/attestationproviders", "microsoft.automation/automationaccounts", "microsoft.avs/privateclouds", + "microsoft.azureplaywrightservice/accounts", + "microsoft.azuresphere/catalogs", + "microsoft.batch/batchaccounts", "microsoft.cache/redis", + "microsoft.cache/redisenterprise/databases", "microsoft.cdn/profiles", + "microsoft.chaos/experiments", + "microsoft.codesigning/codesigningaccounts", "microsoft.cognitiveservices/accounts", + "microsoft.community/communitytrainings", + "microsoft.confidentialledger/managedccfs", "microsoft.containerregistry/registries", + "microsoft.dashboard/grafana", + "microsoft.dbformysql/flexibleservers", + "microsoft.dbforpostgresql/flexibleservers", + "microsoft.devcenter/devcenters", "microsoft.devices/iothubs", - "microsoft.eventgrid/topics", + "microsoft.documentdb/cassandraclusters", + "microsoft.documentdb/databaseaccounts", + "microsoft.documentdb/mongoclusters", "microsoft.eventgrid/domains", "microsoft.eventgrid/partnernamespaces", + "microsoft.eventgrid/topics", "microsoft.eventhub/namespaces", - "microsoft.keyvault/vaults", "microsoft.keyvault/managedhsms", + "microsoft.keyvault/vaults", + "microsoft.kusto/clusters", + "microsoft.loadtestservice/loadtests", + "microsoft.machinelearningservices/registries", "microsoft.machinelearningservices/workspaces", "microsoft.media/mediaservices", "microsoft.media/videoanalyzers", + "microsoft.media/mediaservices/liveevents", + "microsoft.media/mediaservices/streamingendpoints", "microsoft.netapp/netappaccounts/capacitypools/volumes", + "microsoft.network/bastionhosts", + "microsoft.network/frontdoors", + "microsoft.network/networkmanagers", + "microsoft.network/networkmanagers/ipampools", + "microsoft.network/p2svpngateways", "microsoft.network/publicipaddresses", + "microsoft.network/publicipprefixes", "microsoft.network/virtualnetworkgateways", - "microsoft.network/p2svpngateways", - "microsoft.network/frontdoors", - "microsoft.network/bastionhosts", + "microsoft.networkanalytics/dataproducts", + "microsoft.notificationhubs/namespaces", + "microsoft.notificationhubs/namespaces/notificationhubs", "microsoft.operationalinsights/workspaces", "microsoft.purview/accounts", + "microsoft.search/searchservices", "microsoft.servicebus/namespaces", "microsoft.signalrservice/signalr", "microsoft.signalrservice/webpubsub", + "microsoft.sql/managedinstances", "microsoft.sql/servers/databases", - "microsoft.sql/managedinstances" + "microsoft.synapse/workspaces", + "microsoft.synapse/workspaces/bigdatapools", + "microsoft.synapse/workspaces/kustopools", + "microsoft.synapse/workspaces/scopepools", + "microsoft.synapse/workspaces/sqlpools", + "microsoft.web/hostingenvironments", + "microsoft.workloads/sapvirtualinstances" ] } }, "policyDefinitions": [ + { + "policyDefinitionReferenceId": "aad-domainservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/257954d9-4adf-410b-9751-3bb22fe9c180", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.aad/domainservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, { "policyDefinitionReferenceId": "agfoodplatform-farmbeats", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a9ebdeda-251a-4311-92be-5167d73b1682", @@ -186,6 +281,31 @@ } } }, + { + "policyDefinitionReferenceId": "app-managedenvironments", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3893777a-aaf0-4b74-b08a-14ca9e5a9608", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.app/managedenvironments'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, { "policyDefinitionReferenceId": "appconfiguration-configurationstores", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8d0726a6-abae-4b04-9d2e-1f2f67a47e6d", @@ -286,6 +406,81 @@ } } }, + { + "policyDefinitionReferenceId": "azureplaywrightservice-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e2526c67-0363-4da9-96f8-a95d746cf60b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.azureplaywrightservice/accounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "azuresphere-catalogs", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8181847d-3422-4030-b815-481934740b63", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.azuresphere/catalogs'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "batch-batchaccounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/90425e88-1eab-420c-964e-fc1dc79833a6", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.batch/batchaccounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, { "policyDefinitionReferenceId": "cache-redis", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a142867f-3142-4ac6-b952-ab950a29fca5", @@ -312,12 +507,12 @@ } }, { - "policyDefinitionReferenceId": "cdn-profiles", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/76539a09-021e-4300-953b-4c6018ac26dc", + "policyDefinitionReferenceId": "cache-redisenterprise-databases", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/145ff119-bfcf-443a-834c-b59859ec3ee7", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cdn/profiles'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cache/redisenterprise/databases'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -337,12 +532,12 @@ } }, { - "policyDefinitionReferenceId": "cognitiveservices-accounts", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0628b917-d4b4-4af5-bc2b-b4f87cd173ab", + "policyDefinitionReferenceId": "cdn-profiles", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/76539a09-021e-4300-953b-4c6018ac26dc", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cognitiveservices/accounts'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cdn/profiles'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -362,12 +557,12 @@ } }, { - "policyDefinitionReferenceId": "containerregistry-registries", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9ba29e83-863d-4fec-81d0-16dd87067cc3", + "policyDefinitionReferenceId": "chaos-experiments", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/35806bc0-0260-4642-bae7-0ed677b3da44", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.containerregistry/registries'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.chaos/experiments'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -387,12 +582,12 @@ } }, { - "policyDefinitionReferenceId": "devices-iothubs", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/dfbfceaa-14b2-4a90-a679-d169fa6a6a38", + "policyDefinitionReferenceId": "codesigning-codesigningaccounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3d9b8097-326d-4675-8cff-cce4580c9208", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.devices/iothubs'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.codesigning/codesigningaccounts'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -412,12 +607,12 @@ } }, { - "policyDefinitionReferenceId": "eventgrid-topics", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f5094957-e0f7-4af2-9e14-13d60141dc4a", + "policyDefinitionReferenceId": "cognitiveservices-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0628b917-d4b4-4af5-bc2b-b4f87cd173ab", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/topics'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cognitiveservices/accounts'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -437,12 +632,12 @@ } }, { - "policyDefinitionReferenceId": "eventgrid-domains", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a81eb966-6696-46b1-9153-bed01569a7d0", + "policyDefinitionReferenceId": "community-communitytrainings", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bdef6e51-210f-4dc3-87b4-eef30f2e6a17", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/domains'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.community/communitytrainings'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -462,12 +657,12 @@ } }, { - "policyDefinitionReferenceId": "eventgrid-partnernamespaces", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f6d5d5d5-0fa9-4257-b820-69c35016c973", + "policyDefinitionReferenceId": "confidentialledger-managedccfs", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8e29fe36-d794-4c55-87d6-5a206031dde2", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/partnernamespaces'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.confidentialledger/managedccfs'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -487,12 +682,12 @@ } }, { - "policyDefinitionReferenceId": "eventhub-namespaces", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/480851ae-9ff3-49d1-904c-b5bd6f83f1ec", + "policyDefinitionReferenceId": "containerregistry-registries", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9ba29e83-863d-4fec-81d0-16dd87067cc3", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventhub/namespaces'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.containerregistry/registries'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -512,12 +707,12 @@ } }, { - "policyDefinitionReferenceId": "keyvault-vaults", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/71153be3-4742-4aae-9aec-150f7589311b", + "policyDefinitionReferenceId": "dashboard-grafana", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f48c1843-fc88-47c1-9b01-4527c76c890a", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.keyvault/vaults'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dashboard/grafana'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -537,12 +732,12 @@ } }, { - "policyDefinitionReferenceId": "keyvault-managedhsms", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1abe42e1-a726-4dee-94c2-79f364dac9b7", + "policyDefinitionReferenceId": "dbformysql-flexibleservers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/be3ddb6b-c328-4ecd-91e8-c2804868ea9c", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.keyvault/managedhsms'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dbformysql/flexibleservers'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -562,12 +757,12 @@ } }, { - "policyDefinitionReferenceId": "machinelearningservices-workspaces", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ae48c709-d2b4-4fad-8c5c-838524130aa4", + "policyDefinitionReferenceId": "dbforpostgresql-flexibleservers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bd0079c6-6f2d-42f4-9cee-e23930968f10", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.machinelearningservices/workspaces'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dbforpostgresql/flexibleservers'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -587,12 +782,12 @@ } }, { - "policyDefinitionReferenceId": "media-mediaservices", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8d253bba-a338-4fd9-9752-6b6edadca1eb", + "policyDefinitionReferenceId": "devcenter-devcenters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5305ea79-c247-456a-bdbd-dc35cef62ce1", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/mediaservices'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.devcenter/devcenters'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -612,12 +807,12 @@ } }, { - "policyDefinitionReferenceId": "media-videoanalyzers", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/792f8b74-dc05-44fd-b90d-340a097b80e6", + "policyDefinitionReferenceId": "devices-iothubs", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/dfbfceaa-14b2-4a90-a679-d169fa6a6a38", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/videoanalyzers'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.devices/iothubs'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -637,12 +832,12 @@ } }, { - "policyDefinitionReferenceId": "netapp-netappaccounts-capacitypools-volumes", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a285df35-0164-4f4d-9e04-c39056742c55", + "policyDefinitionReferenceId": "documentdb-cassandraclusters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c1c0dd3c-6354-4265-a88b-801f84649944", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.netapp/netappaccounts/capacitypools/volumes'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.documentdb/cassandraclusters'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -662,12 +857,12 @@ } }, { - "policyDefinitionReferenceId": "network-publicipaddresses", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fc602c00-2ce3-4556-b615-fa4159517103", + "policyDefinitionReferenceId": "documentdb-databaseaccounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/322b6192-a99b-4ab6-9b40-43ca19dcd0d9", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/publicipaddresses'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.documentdb/databaseaccounts'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -687,12 +882,12 @@ } }, { - "policyDefinitionReferenceId": "network-virtualnetworkgateways", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6ccd32f6-0a9a-40cf-9c5b-6cfd6aba33e9", + "policyDefinitionReferenceId": "documentdb-mongoclusters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d8a9593e-791e-4fd7-9b22-a75b76e5de17", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/virtualnetworkgateways'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.documentdb/mongoclusters'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -712,12 +907,12 @@ } }, { - "policyDefinitionReferenceId": "network-p2svpngateways", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b9b976cc-59ef-468a-807e-19afa2ebfd52", + "policyDefinitionReferenceId": "eventgrid-domains", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a81eb966-6696-46b1-9153-bed01569a7d0", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/p2svpngateways'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/domains'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -737,12 +932,12 @@ } }, { - "policyDefinitionReferenceId": "network-frontdoors", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/eb5a4c26-04cb-4ab1-81cb-726dc58df772", + "policyDefinitionReferenceId": "eventgrid-partnernamespaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f6d5d5d5-0fa9-4257-b820-69c35016c973", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/frontdoors'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/partnernamespaces'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -762,12 +957,12 @@ } }, { - "policyDefinitionReferenceId": "network-bastionhosts", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6b2899d8-5fdf-4ade-ba59-f1f82664877b", + "policyDefinitionReferenceId": "eventgrid-topics", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f5094957-e0f7-4af2-9e14-13d60141dc4a", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/bastionhosts'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/topics'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -787,12 +982,12 @@ } }, { - "policyDefinitionReferenceId": "operationalinsights-workspaces", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a853abad-dfa4-4bf5-aaa1-04cb10c02d23", + "policyDefinitionReferenceId": "eventhub-namespaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/480851ae-9ff3-49d1-904c-b5bd6f83f1ec", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.operationalinsights/workspaces'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventhub/namespaces'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -812,12 +1007,12 @@ } }, { - "policyDefinitionReferenceId": "purview-accounts", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6b4b3d79-2eeb-4612-b3d1-99ef609ffa4e", + "policyDefinitionReferenceId": "keyvault-managedhsms", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1abe42e1-a726-4dee-94c2-79f364dac9b7", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.purview/accounts'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.keyvault/managedhsms'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -837,12 +1032,12 @@ } }, { - "policyDefinitionReferenceId": "servicebus-namespaces", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e7c86682-34c1-488a-9aab-9cb279207992", + "policyDefinitionReferenceId": "keyvault-vaults", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/71153be3-4742-4aae-9aec-150f7589311b", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.servicebus/namespaces'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.keyvault/vaults'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -862,12 +1057,12 @@ } }, { - "policyDefinitionReferenceId": "signalrservice-signalr", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fc744b31-a930-4eb5-bc06-e81f98bf7214", + "policyDefinitionReferenceId": "kusto-clusters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/aaa4560d-9580-4804-a5e5-b9ffb469d49e", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.signalrservice/signalr'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.kusto/clusters'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -887,12 +1082,12 @@ } }, { - "policyDefinitionReferenceId": "signalrservice-webpubsub", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3d034ef2-001c-46f6-a47b-e6e4a74ff89b", + "policyDefinitionReferenceId": "loadtestservice-loadtests", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/68d95589-2f07-42e3-ae6d-80a2ae3edbc4", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.signalrservice/webpubsub'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.loadtestservice/loadtests'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -912,12 +1107,12 @@ } }, { - "policyDefinitionReferenceId": "sql-servers-databases", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9e6aee71-3781-4acd-bba7-aac4fb067dfa", + "policyDefinitionReferenceId": "machinelearningservices-registries", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/12000b3e-e38b-4bef-9098-38785f06ea32", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.sql/servers/databases'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.machinelearningservices/registries'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -937,12 +1132,12 @@ } }, { - "policyDefinitionReferenceId": "sql-managedinstances", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5f6f2aba-e57f-42ed-9aeb-ffa7321a56db", + "policyDefinitionReferenceId": "machinelearningservices-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ae48c709-d2b4-4fad-8c5c-838524130aa4", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.sql/managedinstances'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.machinelearningservices/workspaces'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -960,10 +1155,788 @@ "value": "[parameters('eventHubName')]" } } - } - ], - "versions": [ - "1.0.0" - ] - } + }, + { + "policyDefinitionReferenceId": "media-mediaservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8d253bba-a338-4fd9-9752-6b6edadca1eb", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/mediaservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "media-videoanalyzers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/792f8b74-dc05-44fd-b90d-340a097b80e6", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/videoanalyzers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "media-mediaservices-liveevents", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5d7409c0-fb8e-4052-9969-ef09f12fd166", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/mediaservices/liveevents'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "media-mediaservices-streamingendpoints", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/944eae3e-6b16-4864-86e1-1b23d58386d5", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/mediaservices/streamingendpoints'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "netapp-netappaccounts-capacitypools-volumes", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a285df35-0164-4f4d-9e04-c39056742c55", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.netapp/netappaccounts/capacitypools/volumes'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-bastionhosts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6b2899d8-5fdf-4ade-ba59-f1f82664877b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/bastionhosts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-frontdoors", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/eb5a4c26-04cb-4ab1-81cb-726dc58df772", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/frontdoors'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-networkmanagers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c29fe1b2-c0b0-4d92-a988-84b484801707", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/networkmanagers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-networkmanagers-ipampools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a08af17e-c2a3-478e-a819-94839ef02b32", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/networkmanagers/ipampools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-p2svpngateways", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b9b976cc-59ef-468a-807e-19afa2ebfd52", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/p2svpngateways'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-publicipaddresses", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fc602c00-2ce3-4556-b615-fa4159517103", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/publicipaddresses'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-publicipprefixes", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2cc39a57-5106-4d41-b872-55c2b9d7b729", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/publicipprefixes'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-virtualnetworkgateways", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6ccd32f6-0a9a-40cf-9c5b-6cfd6aba33e9", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/virtualnetworkgateways'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "networkanalytics-dataproducts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5360664a-5821-4f43-8988-3f0ed8f3f8a5", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.networkanalytics/dataproducts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "notificationhubs-namespaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4891dace-710e-40bd-b81f-6a0b9871b50b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.notificationhubs/namespaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "notificationhubs-namespaces-notificationhubs", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5a69fd36-760e-4a65-a621-836f1159e304", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.notificationhubs/namespaces/notificationhubs'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "operationalinsights-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a853abad-dfa4-4bf5-aaa1-04cb10c02d23", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.operationalinsights/workspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "purview-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6b4b3d79-2eeb-4612-b3d1-99ef609ffa4e", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.purview/accounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "search-searchservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/971199b6-1971-4d3e-85b0-fa7639044679", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.search/searchservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "servicebus-namespaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e7c86682-34c1-488a-9aab-9cb279207992", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.servicebus/namespaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "signalrservice-signalr", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fc744b31-a930-4eb5-bc06-e81f98bf7214", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.signalrservice/signalr'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "signalrservice-webpubsub", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3d034ef2-001c-46f6-a47b-e6e4a74ff89b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.signalrservice/webpubsub'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "sql-managedinstances", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5f6f2aba-e57f-42ed-9aeb-ffa7321a56db", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.sql/managedinstances'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "sql-servers-databases", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9e6aee71-3781-4acd-bba7-aac4fb067dfa", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.sql/servers/databases'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e9b1fed8-35a2-47d0-b8aa-3834f5032862", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces-bigdatapools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/47f4c5ae-1b43-4620-bcbd-65e2ee6fb7c8", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces/bigdatapools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces-kustopools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/63f9b4b2-de99-4b16-ad94-1a5464ac4f7d", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces/kustopools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces-scopepools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a12e0815-0735-48d9-b5b3-8a3b60a85b86", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces/scopepools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces-sqlpools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/72d254bb-d0ed-42f2-9160-6b11b65b599c", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces/sqlpools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "web-hostingenvironments", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/58cb2d8e-623c-4557-bb4e-0b64cb41ec55", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.web/hostingenvironments'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + }, + { + "policyDefinitionReferenceId": "workloads-sapvirtualinstances", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ffe49e3d-50dd-4137-8fe5-6877c4384b69", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.workloads/sapvirtualinstances'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "eventHubAuthorizationRuleId": { + "value": "[parameters('eventHubAuthorizationRuleId')]" + }, + "eventHubName": { + "value": "[parameters('eventHubName')]" + } + } + } + ], + "versions": [ + "1.1.0", + "1.0.0" + ] + }, + "name": "1020d527-2764-4230-92cc-7035e4fcf8a7", + "id": "/providers/Microsoft.Authorization/policySetDefinitions/1020d527-2764-4230-92cc-7035e4fcf8a7" } \ No newline at end of file diff --git a/built-in-policies/policySetDefinitions/Monitoring/AzureMonitor_DiagSettings_logAnalytics_allLogs.json b/built-in-policies/policySetDefinitions/Monitoring/AzureMonitor_DiagSettings_logAnalytics_allLogs.json new file mode 100644 index 000000000..ebcf2eaa4 --- /dev/null +++ b/built-in-policies/policySetDefinitions/Monitoring/AzureMonitor_DiagSettings_logAnalytics_allLogs.json @@ -0,0 +1,3432 @@ +{ + "properties": { + "displayName": "Enable allLogs category group resource logging for supported resources to Log Analytics", + "description": "Resource logs should be enabled to track activities and events that take place on your resources and give you visibility and insights into any changes that occur. This initiative deploys diagnostic setting using the allLogs category group to route logs to an Event Hub for all supported resources", + "policyType": "BuiltIn", + "version": "1.0.0", + "metadata": { + "category": "Monitoring", + "version": "1.0.0" + }, + "parameters": { + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Enable or disable the execution of the policy" + }, + "allowedValues": [ + "DeployIfNotExists", + "AuditIfNotExists", + "Disabled" + ], + "defaultValue": "DeployIfNotExists" + }, + "diagnosticSettingName": { + "type": "string", + "metadata": { + "displayName": "Diagnostic Setting Name", + "description": "Diagnostic Setting Name" + }, + "defaultValue": "setByPolicy-LogAnalytics" + }, + "resourceLocationList": { + "type": "array", + "metadata": { + "displayName": "Resource Location List", + "description": "Resource Location List to send logs to nearby Log Analytics. A single entry \"*\" selects all locations (default)." + }, + "defaultValue": [ + "*" + ] + }, + "logAnalytics": { + "type": "string", + "metadata": { + "displayName": "Log Analytics Workspace", + "description": "Log Analytics Workspace", + "strongType": "omsWorkspace", + "assignPermissions": true + } + }, + "resourceTypeList": { + "type": "array", + "metadata": { + "displayName": "Resource Types", + "description": "List of Resource Types to be evaluated for diagnostic setting existence." + }, + "allowedValues": [ + "microsoft.aad/domainservices", + "microsoft.agfoodplatform/farmbeats", + "microsoft.analysisservices/servers", + "microsoft.apimanagement/service", + "microsoft.app/managedenvironments", + "microsoft.appconfiguration/configurationstores", + "microsoft.appplatform/spring", + "microsoft.attestation/attestationproviders", + "microsoft.automation/automationaccounts", + "microsoft.autonomousdevelopmentplatform/workspaces", + "microsoft.avs/privateclouds", + "microsoft.azureplaywrightservice/accounts", + "microsoft.azuresphere/catalogs", + "microsoft.batch/batchaccounts", + "microsoft.botservice/botservices", + "microsoft.cache/redis", + "microsoft.cache/redisenterprise/databases", + "microsoft.cdn/cdnwebapplicationfirewallpolicies", + "microsoft.cdn/profiles", + "microsoft.cdn/profiles/endpoints", + "microsoft.chaos/experiments", + "microsoft.classicnetwork/networksecuritygroups", + "microsoft.cloudtest/hostedpools", + "microsoft.codesigning/codesigningaccounts", + "microsoft.cognitiveservices/accounts", + "microsoft.communication/communicationservices", + "microsoft.community/communitytrainings", + "microsoft.confidentialledger/managedccfs", + "microsoft.connectedcache/enterprisemcccustomers", + "microsoft.connectedcache/ispcustomers", + "microsoft.containerinstance/containergroups", + "microsoft.containerregistry/registries", + "microsoft.customproviders/resourceproviders", + "microsoft.d365customerinsights/instances", + "microsoft.dashboard/grafana", + "microsoft.databricks/workspaces", + "microsoft.datafactory/factories", + "microsoft.datalakeanalytics/accounts", + "microsoft.datalakestore/accounts", + "microsoft.dataprotection/backupvaults", + "microsoft.datashare/accounts", + "microsoft.dbformariadb/servers", + "microsoft.dbformysql/flexibleservers", + "microsoft.dbformysql/servers", + "microsoft.dbforpostgresql/flexibleservers", + "microsoft.dbforpostgresql/servergroupsv2", + "microsoft.dbforpostgresql/servers", + "microsoft.desktopvirtualization/applicationgroups", + "microsoft.desktopvirtualization/hostpools", + "microsoft.desktopvirtualization/scalingplans", + "microsoft.desktopvirtualization/workspaces", + "microsoft.devcenter/devcenters", + "microsoft.devices/iothubs", + "microsoft.devices/provisioningservices", + "microsoft.digitaltwins/digitaltwinsinstances", + "microsoft.documentdb/cassandraclusters", + "microsoft.documentdb/databaseaccounts", + "microsoft.documentdb/mongoclusters", + "microsoft.eventgrid/domains", + "microsoft.eventgrid/partnernamespaces", + "microsoft.eventgrid/partnertopics", + "microsoft.eventgrid/systemtopics", + "microsoft.eventgrid/topics", + "microsoft.eventhub/namespaces", + "microsoft.experimentation/experimentworkspaces", + "microsoft.healthcareapis/services", + "microsoft.healthcareapis/workspaces/dicomservices", + "microsoft.healthcareapis/workspaces/fhirservices", + "microsoft.healthcareapis/workspaces/iotconnectors", + "microsoft.insights/autoscalesettings", + "microsoft.insights/components", + "microsoft.insights/datacollectionrules", + "microsoft.keyvault/managedhsms", + "microsoft.keyvault/vaults", + "microsoft.kusto/clusters", + "microsoft.loadtestservice/loadtests", + "microsoft.logic/integrationaccounts", + "microsoft.logic/workflows", + "microsoft.machinelearningservices/registries", + "microsoft.machinelearningservices/workspaces", + "microsoft.machinelearningservices/workspaces/onlineendpoints", + "microsoft.managednetworkfabric/networkdevices", + "microsoft.media/mediaservices", + "microsoft.media/videoanalyzers", + "microsoft.media/mediaservices/liveevents", + "microsoft.media/mediaservices/streamingendpoints", + "microsoft.netapp/netappaccounts/capacitypools/volumes", + "microsoft.network/applicationgateways", + "microsoft.network/azurefirewalls", + "microsoft.network/bastionhosts", + "microsoft.network/dnsresolverpolicies", + "microsoft.network/expressroutecircuits", + "microsoft.network/frontdoors", + "microsoft.network/loadbalancers", + "microsoft.network/networkmanagers", + "microsoft.network/networkmanagers/ipampools", + "microsoft.network/networksecuritygroups", + "microsoft.network/networksecurityperimeters", + "microsoft.network/p2svpngateways", + "microsoft.network/publicipaddresses", + "microsoft.network/publicipprefixes", + "microsoft.network/trafficmanagerprofiles", + "microsoft.network/virtualnetworkgateways", + "microsoft.network/virtualnetworks", + "microsoft.network/vpngateways", + "microsoft.networkanalytics/dataproducts", + "microsoft.networkcloud/baremetalmachines", + "microsoft.networkcloud/clusters", + "microsoft.networkcloud/storageappliances", + "microsoft.networkfunction/azuretrafficcollectors", + "microsoft.notificationhubs/namespaces", + "microsoft.notificationhubs/namespaces/notificationhubs", + "microsoft.openenergyplatform/energyservices", + "microsoft.operationalinsights/workspaces", + "microsoft.powerbi/tenants/workspaces", + "microsoft.powerbidedicated/capacities", + "microsoft.purview/accounts", + "microsoft.recoveryservices/vaults", + "microsoft.relay/namespaces", + "microsoft.search/searchservices", + "microsoft.servicebus/namespaces", + "microsoft.servicenetworking/trafficcontrollers", + "microsoft.signalrservice/signalr", + "microsoft.signalrservice/webpubsub", + "microsoft.sql/managedinstances", + "microsoft.sql/managedinstances/databases", + "microsoft.sql/servers/databases", + "microsoft.storagecache/caches", + "microsoft.storagemover/storagemovers", + "microsoft.streamanalytics/streamingjobs", + "microsoft.synapse/workspaces", + "microsoft.synapse/workspaces/bigdatapools", + "microsoft.synapse/workspaces/kustopools", + "microsoft.synapse/workspaces/scopepools", + "microsoft.synapse/workspaces/sqlpools", + "microsoft.timeseriesinsights/environments", + "microsoft.timeseriesinsights/environments/eventsources", + "microsoft.videoindexer/accounts", + "microsoft.web/hostingenvironments", + "microsoft.workloads/sapvirtualinstances" + ], + "defaultValue": [ + "microsoft.aad/domainservices", + "microsoft.agfoodplatform/farmbeats", + "microsoft.analysisservices/servers", + "microsoft.apimanagement/service", + "microsoft.app/managedenvironments", + "microsoft.appconfiguration/configurationstores", + "microsoft.appplatform/spring", + "microsoft.attestation/attestationproviders", + "microsoft.automation/automationaccounts", + "microsoft.autonomousdevelopmentplatform/workspaces", + "microsoft.avs/privateclouds", + "microsoft.azureplaywrightservice/accounts", + "microsoft.azuresphere/catalogs", + "microsoft.batch/batchaccounts", + "microsoft.botservice/botservices", + "microsoft.cache/redis", + "microsoft.cache/redisenterprise/databases", + "microsoft.cdn/cdnwebapplicationfirewallpolicies", + "microsoft.cdn/profiles", + "microsoft.cdn/profiles/endpoints", + "microsoft.chaos/experiments", + "microsoft.classicnetwork/networksecuritygroups", + "microsoft.cloudtest/hostedpools", + "microsoft.codesigning/codesigningaccounts", + "microsoft.cognitiveservices/accounts", + "microsoft.communication/communicationservices", + "microsoft.community/communitytrainings", + "microsoft.confidentialledger/managedccfs", + "microsoft.connectedcache/enterprisemcccustomers", + "microsoft.connectedcache/ispcustomers", + "microsoft.containerinstance/containergroups", + "microsoft.containerregistry/registries", + "microsoft.customproviders/resourceproviders", + "microsoft.d365customerinsights/instances", + "microsoft.dashboard/grafana", + "microsoft.databricks/workspaces", + "microsoft.datafactory/factories", + "microsoft.datalakeanalytics/accounts", + "microsoft.datalakestore/accounts", + "microsoft.dataprotection/backupvaults", + "microsoft.datashare/accounts", + "microsoft.dbformariadb/servers", + "microsoft.dbformysql/flexibleservers", + "microsoft.dbformysql/servers", + "microsoft.dbforpostgresql/flexibleservers", + "microsoft.dbforpostgresql/servergroupsv2", + "microsoft.dbforpostgresql/servers", + "microsoft.desktopvirtualization/applicationgroups", + "microsoft.desktopvirtualization/hostpools", + "microsoft.desktopvirtualization/scalingplans", + "microsoft.desktopvirtualization/workspaces", + "microsoft.devcenter/devcenters", + "microsoft.devices/iothubs", + "microsoft.devices/provisioningservices", + "microsoft.digitaltwins/digitaltwinsinstances", + "microsoft.documentdb/cassandraclusters", + "microsoft.documentdb/databaseaccounts", + "microsoft.documentdb/mongoclusters", + "microsoft.eventgrid/domains", + "microsoft.eventgrid/partnernamespaces", + "microsoft.eventgrid/partnertopics", + "microsoft.eventgrid/systemtopics", + "microsoft.eventgrid/topics", + "microsoft.eventhub/namespaces", + "microsoft.experimentation/experimentworkspaces", + "microsoft.healthcareapis/services", + "microsoft.healthcareapis/workspaces/dicomservices", + "microsoft.healthcareapis/workspaces/fhirservices", + "microsoft.healthcareapis/workspaces/iotconnectors", + "microsoft.insights/autoscalesettings", + "microsoft.insights/components", + "microsoft.insights/datacollectionrules", + "microsoft.keyvault/managedhsms", + "microsoft.keyvault/vaults", + "microsoft.kusto/clusters", + "microsoft.loadtestservice/loadtests", + "microsoft.logic/integrationaccounts", + "microsoft.logic/workflows", + "microsoft.machinelearningservices/registries", + "microsoft.machinelearningservices/workspaces", + "microsoft.machinelearningservices/workspaces/onlineendpoints", + "microsoft.managednetworkfabric/networkdevices", + "microsoft.media/mediaservices", + "microsoft.media/videoanalyzers", + "microsoft.media/mediaservices/liveevents", + "microsoft.media/mediaservices/streamingendpoints", + "microsoft.netapp/netappaccounts/capacitypools/volumes", + "microsoft.network/applicationgateways", + "microsoft.network/azurefirewalls", + "microsoft.network/bastionhosts", + "microsoft.network/dnsresolverpolicies", + "microsoft.network/expressroutecircuits", + "microsoft.network/frontdoors", + "microsoft.network/loadbalancers", + "microsoft.network/networkmanagers", + "microsoft.network/networkmanagers/ipampools", + "microsoft.network/networksecuritygroups", + "microsoft.network/networksecurityperimeters", + "microsoft.network/p2svpngateways", + "microsoft.network/publicipaddresses", + "microsoft.network/publicipprefixes", + "microsoft.network/trafficmanagerprofiles", + "microsoft.network/virtualnetworkgateways", + "microsoft.network/virtualnetworks", + "microsoft.network/vpngateways", + "microsoft.networkanalytics/dataproducts", + "microsoft.networkcloud/baremetalmachines", + "microsoft.networkcloud/clusters", + "microsoft.networkcloud/storageappliances", + "microsoft.networkfunction/azuretrafficcollectors", + "microsoft.notificationhubs/namespaces", + "microsoft.notificationhubs/namespaces/notificationhubs", + "microsoft.openenergyplatform/energyservices", + "microsoft.operationalinsights/workspaces", + "microsoft.powerbi/tenants/workspaces", + "microsoft.powerbidedicated/capacities", + "microsoft.purview/accounts", + "microsoft.recoveryservices/vaults", + "microsoft.relay/namespaces", + "microsoft.search/searchservices", + "microsoft.servicebus/namespaces", + "microsoft.servicenetworking/trafficcontrollers", + "microsoft.signalrservice/signalr", + "microsoft.signalrservice/webpubsub", + "microsoft.sql/managedinstances", + "microsoft.sql/managedinstances/databases", + "microsoft.sql/servers/databases", + "microsoft.storagecache/caches", + "microsoft.storagemover/storagemovers", + "microsoft.streamanalytics/streamingjobs", + "microsoft.synapse/workspaces", + "microsoft.synapse/workspaces/bigdatapools", + "microsoft.synapse/workspaces/kustopools", + "microsoft.synapse/workspaces/scopepools", + "microsoft.synapse/workspaces/sqlpools", + "microsoft.timeseriesinsights/environments", + "microsoft.timeseriesinsights/environments/eventsources", + "microsoft.videoindexer/accounts", + "microsoft.web/hostingenvironments", + "microsoft.workloads/sapvirtualinstances" + ] + } + }, + "policyDefinitions": [ + { + "policyDefinitionReferenceId": "aad-domainservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1bd91eae-4429-4f23-b780-8c9622e023e3", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.aad/domainservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "agfoodplatform-farmbeats", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f969646f-b6b8-45a0-b736-bf9b4bb933dc", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.agfoodplatform/farmbeats'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "analysisservices-servers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e40b8f6f-0ecf-4c3b-b095-ba3562256e48", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.analysisservices/servers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "apimanagement-service", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/567c93f7-3661-494f-a30f-0a94d9bfebf8", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.apimanagement/service'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "app-managedenvironments", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6a664864-e2b5-413e-b930-f11caa132f16", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.app/managedenvironments'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "appconfiguration-configurationstores", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4b05de63-3ad2-4f6d-b421-da21f1328f3b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.appconfiguration/configurationstores'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "appplatform-spring", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0b6b8abb-7761-4e02-ae0e-2c873b5152ca", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.appplatform/spring'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "attestation-attestationproviders", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/856331d3-0169-4dd9-9b04-cbb2ad3d1cf2", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.attestation/attestationproviders'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "automation-automationaccounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b797045a-b3cd-46e4-adc4-bbadb3381d78", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.automation/automationaccounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "autonomousdevelopmentplatform-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/234bbd1b-05f6-4639-8770-1cd5278ba2c9", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.autonomousdevelopmentplatform/workspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "avs-privateclouds", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/69ab8bfc-dc5b-443d-93a7-7531551dec66", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.avs/privateclouds'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "azureplaywrightservice-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/81039988-1f84-4aa6-8039-0a64c2a301b4", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.azureplaywrightservice/accounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "azuresphere-catalogs", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bbf47f27-95e4-46a0-82e1-898ce046d857", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.azuresphere/catalogs'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "batch-batchaccounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9fcae8ed-246a-407b-8f75-f3500ff2c9db", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.batch/batchaccounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "botservice-botservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/415eaa04-e9db-476a-ba43-092d70ebe1e7", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.botservice/botservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "cache-redis", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/aec4c33f-2f2a-4fd3-91cd-24a939513c60", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cache/redis'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "cache-redisenterprise-databases", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fa570aa1-acca-4eea-8e5a-233cf2c5e4c2", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cache/redisenterprise/databases'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "cdn-cdnwebapplicationfirewallpolicies", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2fbd2ca9-e7b2-47a0-a8b2-575f3f7607d4", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cdn/cdnwebapplicationfirewallpolicies'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "cdn-profiles", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6201aeb7-2b5c-4671-8ab4-5d3ba4d77f3b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cdn/profiles'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "cdn-profiles-endpoints", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e74570cf-1b7d-4bed-b79e-d1fd1117a39a", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cdn/profiles/endpoints'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "chaos-experiments", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/39078c44-b8d4-4c7d-8579-7f021d326ebf", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.chaos/experiments'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "classicnetwork-networksecuritygroups", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/087dbf66-448d-4235-b7b8-17af48edc9db", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.classicnetwork/networksecuritygroups'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "cloudtest-hostedpools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/aade2723-e7f6-46fd-b1dc-e6c2c7f7edc4", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cloudtest/hostedpools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "codesigning-codesigningaccounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/958060c2-8d8e-478e-b3ec-d3d2249b461c", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.codesigning/codesigningaccounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "cognitiveservices-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/55d1f543-d1b0-4811-9663-d6d0dbc6326d", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cognitiveservices/accounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "communication-communicationservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/acbb9698-46bd-4800-89da-e3473c4ab10d", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.communication/communicationservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "community-communitytrainings", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0509e2d8-d657-4563-a7c8-b88b9180a6e8", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.community/communitytrainings'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "confidentialledger-managedccfs", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b6f29e6b-4b21-4bb6-a997-38592fa02864", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.confidentialledger/managedccfs'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "connectedcache-enterprisemcccustomers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c13b41e7-a45f-4600-96c0-18f84fb07771", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.connectedcache/enterprisemcccustomers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "connectedcache-ispcustomers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0e4325e3-228b-40f0-83ae-9c03276858c1", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.connectedcache/ispcustomers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "containerinstance-containergroups", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/85779c9a-7fdf-4294-937c-ded183166fa8", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.containerinstance/containergroups'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "containerregistry-registries", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/56288eb2-4350-461d-9ece-2bb242269dce", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.containerregistry/registries'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "customproviders-resourceproviders", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/65a1573e-cc90-412b-8db2-ba60731b0ea6", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.customproviders/resourceproviders'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "d365customerinsights-instances", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/167dbbbc-a03a-4ebe-8e46-c34cc67f7d9d", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.d365customerinsights/instances'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "dashboard-grafana", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d98f63ed-e319-4dc3-898f-600953a05f7e", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dashboard/grafana'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "databricks-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/454c7d4b-c141-43f1-8c81-975ebb15a9b5", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.databricks/workspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "datafactory-factories", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/751f9297-5aae-4313-af2d-2a89226a7856", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.datafactory/factories'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "datalakeanalytics-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d111f33e-5cb3-414e-aec4-427e7d1080c9", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.datalakeanalytics/accounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "datalakestore-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/dfe69c56-9c12-4271-9e62-7607ab669582", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.datalakestore/accounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "dataprotection-backupvaults", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fea83f6c-a18a-4338-8f1f-80ecba4c5643", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dataprotection/backupvaults'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "datashare-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ed251afd-72b1-4e41-b6c9-6614420f1207", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.datashare/accounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "dbformariadb-servers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f62b9eab-b489-4388-9874-b0a62ca31327", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dbformariadb/servers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "dbformysql-flexibleservers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7860f3fe-0db3-42d4-bf3d-7042ea5e5787", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dbformysql/flexibleservers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "dbformysql-servers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/041fdf14-0dd4-4ce0-83ff-de5456be0c85", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dbformysql/servers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "dbforpostgresql-flexibleservers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5fbd326d-328c-414e-a922-2d6963998962", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dbforpostgresql/flexibleservers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "dbforpostgresql-servergroupsv2", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/84509667-1a94-4255-9e5f-b479075c1069", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dbforpostgresql/servergroupsv2'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "dbforpostgresql-servers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bbdbb83b-cbfe-49f7-b7d1-1126630a68b7", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dbforpostgresql/servers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "desktopvirtualization-applicationgroups", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/99b3bfad-aef0-476d-ae98-40861f8eae22", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.desktopvirtualization/applicationgroups'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "desktopvirtualization-hostpools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a7c668bd-3327-474f-8fb5-8146e3e40e40", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.desktopvirtualization/hostpools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "desktopvirtualization-scalingplans", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8ea88471-98e1-47e4-9f63-838c990ba2f4", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.desktopvirtualization/scalingplans'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "desktopvirtualization-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/867c08d5-bc47-404d-9a1b-0aec7a8d34eb", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.desktopvirtualization/workspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "devcenter-devcenters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/82b076b9-2062-4516-ae4c-37b1890eabb2", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.devcenter/devcenters'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "devices-iothubs", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/614d9fbd-68cd-4832-96db-3362069661b2", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.devices/iothubs'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "devices-provisioningservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/041e904a-33e5-45fd-b3f6-4ac95f1f8761", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.devices/provisioningservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "digitaltwins-digitaltwinsinstances", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4c9cd884-3e45-4588-ac9d-00d44be2cbcd", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.digitaltwins/digitaltwinsinstances'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "documentdb-cassandraclusters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ae0fc3d3-c9ce-43e8-923a-a143db56d81e", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.documentdb/cassandraclusters'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "documentdb-databaseaccounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/68ba9fc9-71b9-4e6f-9cf5-ecc07722324c", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.documentdb/databaseaccounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "documentdb-mongoclusters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/064a3695-3197-4354-816b-65c7b952db9e", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.documentdb/mongoclusters'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "eventgrid-domains", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b90ec596-faa6-4c61-9515-34085703e260", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/domains'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "eventgrid-partnernamespaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3496f6fd-57ba-485c-8a14-183c4493b781", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/partnernamespaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "eventgrid-partnertopics", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e1bf4d43-542a-4410-918d-7e61c8e1ac21", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/partnertopics'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "eventgrid-systemtopics", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0fff3e39-f422-45b0-b497-33a05b996d3e", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/systemtopics'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "eventgrid-topics", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/46b2dd5d-3936-4347-8908-b298ea4466d3", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/topics'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "eventhub-namespaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/441af8bf-7c88-4efc-bd24-b7be28d4acce", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventhub/namespaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "experimentation-experimentworkspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0ba93a1b-ac4d-4e7b-976a-548a18be1e52", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.experimentation/experimentworkspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "healthcareapis-services", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e25bcb29-0412-42c3-a526-1ff794310a1e", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.healthcareapis/services'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "healthcareapis-workspaces-dicomservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f0d25196-1ea4-49e1-ad53-ccada27b4862", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.healthcareapis/workspaces/dicomservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "healthcareapis-workspaces-fhirservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/eb2fea88-fa7b-4531-a4c1-428c618fbcc8", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.healthcareapis/workspaces/fhirservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "healthcareapis-workspaces-iotconnectors", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/557c828f-aa51-40d9-868a-cff8d3982818", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.healthcareapis/workspaces/iotconnectors'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "insights-autoscalesettings", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/30499756-47d6-493c-9e57-ee3db2d9fa96", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.insights/autoscalesettings'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "insights-components", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/79494980-ea12-4ca1-8cca-317e942b6da2", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.insights/components'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "insights-datacollectionrules", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7e87b2cc-1e49-4e07-a651-a2f38d4667ad", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.insights/datacollectionrules'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "keyvault-managedhsms", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b88bfd90-4da5-43eb-936f-ae1481924291", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.keyvault/managedhsms'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "keyvault-vaults", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6b359d8f-f88d-4052-aa7c-32015963ecc1", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.keyvault/vaults'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "kusto-clusters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a819f227-229d-44cb-8ad6-25becdb4451f", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.kusto/clusters'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "loadtestservice-loadtests", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/75a112bc-759f-4f29-83cc-799019db39c3", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.loadtestservice/loadtests'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "logic-integrationaccounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1840aef8-71df-4a30-a108-efdb4f291a7f", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.logic/integrationaccounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "logic-workflows", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/63d1a629-735c-448b-b45f-5e3865e84cf5", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.logic/workflows'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "machinelearningservices-registries", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/33835ef6-bc67-4bde-bf5f-5a857f195a57", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.machinelearningservices/registries'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "machinelearningservices-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/90c90eda-bfe7-4c67-bf26-410420ed1047", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.machinelearningservices/workspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "machinelearningservices-workspaces-onlineendpoints", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5cfb9e8a-2f13-40bd-a527-c89bc596d299", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.machinelearningservices/workspaces/onlineendpoints'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "managednetworkfabric-networkdevices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d7d59290-3ee5-4c1b-b408-c38b21799aea", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.managednetworkfabric/networkdevices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "media-mediaservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/69214fad-6742-49a9-8f71-ee9d269364ab", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/mediaservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "media-videoanalyzers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/34c7546c-d637-4b5d-96ab-93fb6ed07af8", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/videoanalyzers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "media-mediaservices-liveevents", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5d487647-6a53-4839-8eb8-edccf5e6bf1d", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/mediaservices/liveevents'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "media-mediaservices-streamingendpoints", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/be26ca28-761d-4538-b78a-975eb47c680c", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/mediaservices/streamingendpoints'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "netapp-netappaccounts-capacitypools-volumes", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c3b912c2-7f5b-47ac-bd52-8c85a7667961", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.netapp/netappaccounts/capacitypools/volumes'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-applicationgateways", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/92012204-a7e4-4a95-bbe5-90d0d3e12735", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/applicationgateways'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-azurefirewalls", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5fcf46f9-194c-47ff-8889-380f57ae4617", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/azurefirewalls'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-bastionhosts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f8352124-56fa-4f94-9441-425109cdc14b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/bastionhosts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-dnsresolverpolicies", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/dc1b5908-da05-4eed-a988-c5e32fdb682d", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/dnsresolverpolicies'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-expressroutecircuits", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c5ecf495-6caa-445c-b431-04fda56c555a", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/expressroutecircuits'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-frontdoors", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e9c56c41-d453-4a80-af93-2331afeb3d82", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/frontdoors'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-loadbalancers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/889bfebf-7428-426e-a86f-79e2a7de2f71", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/loadbalancers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-networkmanagers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/23673f24-2594-43e9-9983-60a0be21bd76", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/networkmanagers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-networkmanagers-ipampools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6ee1c58c-a123-4cd6-8643-48b2f7ffb3e1", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/networkmanagers/ipampools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-networksecuritygroups", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/baa4c6de-b7cf-4b12-b436-6e40ef44c8cb", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/networksecuritygroups'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-networksecurityperimeters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0ebe872d-7029-4292-88bc-ad3e2cf3772f", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/networksecurityperimeters'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-p2svpngateways", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cac9e1c5-c3cb-47fa-8d4c-88b8559262d2", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/p2svpngateways'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-publicipaddresses", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1513498c-3091-461a-b321-e9b433218d28", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/publicipaddresses'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-publicipprefixes", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b55f2e8e-dc76-4262-a0e3-45f02200ff0e", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/publicipprefixes'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-trafficmanagerprofiles", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1118afbc-c48d-43ae-931a-87b38956d40b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/trafficmanagerprofiles'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-virtualnetworkgateways", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ed6ae75a-828f-4fea-88fd-dead1145f1dd", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/virtualnetworkgateways'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-virtualnetworks", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3234ff41-8bec-40a3-b5cb-109c95f1c8ce", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/virtualnetworks'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-vpngateways", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d8624de8-47fe-47c0-bea0-2d8329b628fe", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/vpngateways'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "networkanalytics-dataproducts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0e861bb0-d926-4cdb-b2d6-d59336b8f5b3", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.networkanalytics/dataproducts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "networkcloud-baremetalmachines", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a9725bd4-a2ad-479f-a29b-5e163cada399", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.networkcloud/baremetalmachines'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "networkcloud-clusters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/63a8eb0d-f030-4bc6-a1e4-6998f23aa160", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.networkcloud/clusters'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "networkcloud-storageappliances", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4f925033-4d52-4619-909c-9c47a687dc51", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.networkcloud/storageappliances'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "networkfunction-azuretrafficcollectors", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/60579569-3633-42cb-ae6a-195080bf310d", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.networkfunction/azuretrafficcollectors'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "notificationhubs-namespaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/69e0da8f-ca50-479d-b1a8-33a31426c512", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.notificationhubs/namespaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "notificationhubs-namespaces-notificationhubs", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/54c7cff6-a032-43e1-9656-d4c24665f805", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.notificationhubs/namespaces/notificationhubs'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "openenergyplatform-energyservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/14ed86b4-ea45-4b1b-98a5-eb8f5f7da726", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.openenergyplatform/energyservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "operationalinsights-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/818719e5-1338-4776-9a9d-3c31e4df5986", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.operationalinsights/workspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "powerbi-tenants-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fc2bb2e1-739a-4a03-86a2-16ad55e90bd9", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.powerbi/tenants/workspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "powerbidedicated-capacities", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7a8afaba-cc24-4306-b83f-d178f1a10ba2", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.powerbidedicated/capacities'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "purview-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4cabf9fc-4ed1-4990-bbaf-7248fb8751bc", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.purview/accounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "recoveryservices-vaults", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2f4d1c08-3695-41a7-a0a0-8db4a0e25233", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.recoveryservices/vaults'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "relay-namespaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/56ae9f08-b8c9-4a0f-8f58-5dbcd63bef84", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.relay/namespaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "search-searchservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8def4bdd-4362-4ed6-a26f-7bf8f2c58839", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.search/searchservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "servicebus-namespaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0277b2d5-6e6f-4d97-9929-a5c4eab56fd7", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.servicebus/namespaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "servicenetworking-trafficcontrollers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d3abca82-2ae2-4707-bf5e-cfc765ce9ff1", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.servicenetworking/trafficcontrollers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "signalrservice-signalr", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/93a604fe-0ec2-4a99-ab8c-7ef08f05555a", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.signalrservice/signalr'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "signalrservice-webpubsub", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0da6faeb-d6c6-4f6e-9f49-06277493270b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.signalrservice/webpubsub'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "sql-managedinstances", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8fc4ca5f-6abc-4b30-9565-0bd91ac49420", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.sql/managedinstances'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "sql-managedinstances-databases", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8d42b501-dd03-449d-a070-32d1db2e546b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.sql/managedinstances/databases'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "sql-servers-databases", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6567d3f3-42d0-4cfb-9606-9741ba60fa07", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.sql/servers/databases'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "storagecache-caches", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3d28ea18-8e88-4160-96ff-4b6af4fd94c7", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.storagecache/caches'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "storagemover-storagemovers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e99ab54f-260e-4925-a70f-8fe0a92443ef", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.storagemover/storagemovers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "streamanalytics-streamingjobs", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2453e322-a7e5-4905-ba1e-ac6ea60ff808", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.streamanalytics/streamingjobs'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/305408ed-dd5a-43b9-80c1-9eea87a176bb", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces-bigdatapools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/29565b0a-e1b5-49c1-94bf-b8b258656460", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces/bigdatapools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces-kustopools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/887dc342-c6bd-418b-9407-ab0e27deba36", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces/kustopools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces-scopepools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f018b68f-d953-4238-81a3-94a0f39507e3", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces/scopepools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces-sqlpools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a271e156-b295-4537-b01d-09675d9e7851", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces/sqlpools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "timeseriesinsights-environments", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/068e22bd-8057-466b-9642-7cd2ca476158", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.timeseriesinsights/environments'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "timeseriesinsights-environments-eventsources", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a83fcddb-39d0-4c21-af38-76d2c935c3ca", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.timeseriesinsights/environments/eventsources'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "videoindexer-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a1a5f3c5-d01a-459c-8398-a3c9a79ad879", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.videoindexer/accounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "web-hostingenvironments", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9dc3e252-1cff-4ae5-bcad-5a92b7167d43", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.web/hostingenvironments'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "workloads-sapvirtualinstances", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1568dd08-cca0-4073-bfd8-e08a7fdc543e", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.workloads/sapvirtualinstances'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + } + ], + "versions": [ + "1.0.0" + ] + }, + "name": "0884adba-2312-4468-abeb-5422caed1038", + "id": "/providers/Microsoft.Authorization/policySetDefinitions/0884adba-2312-4468-abeb-5422caed1038" +} \ No newline at end of file diff --git a/built-in-policies/policySetDefinitions/Monitoring/AzureMonitor_DiagSettings_logAnalytics_audit.json b/built-in-policies/policySetDefinitions/Monitoring/AzureMonitor_DiagSettings_logAnalytics_audit.json index b6fda66dd..88c392e3a 100644 --- a/built-in-policies/policySetDefinitions/Monitoring/AzureMonitor_DiagSettings_logAnalytics_audit.json +++ b/built-in-policies/policySetDefinitions/Monitoring/AzureMonitor_DiagSettings_logAnalytics_audit.json @@ -1,14 +1,12 @@ { - "name": "f5b29bc4-feca-4cc6-a58a-772dd5e290a5", - "id": "/providers/Microsoft.Authorization/policySetDefinitions/f5b29bc4-feca-4cc6-a58a-772dd5e290a5", "properties": { "displayName": "Enable audit category group resource logging for supported resources to Log Analytics", "description": "Resource logs should be enabled to track activities and events that take place on your resources and give you visibility and insights into any changes that occur. This initiative deploys diagnostic setting using the audit category group to route logs to Log Analytics for all supported resources.", "policyType": "BuiltIn", - "version": "1.0.0", + "version": "1.1.0", "metadata": { "category": "Monitoring", - "version": "1.0.0" + "version": "1.1.0" }, "parameters": { "effect": { @@ -58,78 +56,172 @@ "description": "List of Resource Types to be evaluated for diagnostic setting existence." }, "allowedValues": [ + "microsoft.aad/domainservices", "microsoft.agfoodplatform/farmbeats", "microsoft.apimanagement/service", + "microsoft.app/managedenvironments", "microsoft.appconfiguration/configurationstores", "microsoft.attestation/attestationproviders", "microsoft.automation/automationaccounts", "microsoft.avs/privateclouds", + "microsoft.azureplaywrightservice/accounts", + "microsoft.azuresphere/catalogs", + "microsoft.batch/batchaccounts", "microsoft.cache/redis", + "microsoft.cache/redisenterprise/databases", "microsoft.cdn/profiles", + "microsoft.chaos/experiments", + "microsoft.codesigning/codesigningaccounts", "microsoft.cognitiveservices/accounts", + "microsoft.community/communitytrainings", + "microsoft.confidentialledger/managedccfs", "microsoft.containerregistry/registries", + "microsoft.dashboard/grafana", + "microsoft.dbformysql/flexibleservers", + "microsoft.dbforpostgresql/flexibleservers", + "microsoft.devcenter/devcenters", "microsoft.devices/iothubs", - "microsoft.eventgrid/topics", + "microsoft.documentdb/cassandraclusters", + "microsoft.documentdb/databaseaccounts", + "microsoft.documentdb/mongoclusters", "microsoft.eventgrid/domains", "microsoft.eventgrid/partnernamespaces", + "microsoft.eventgrid/topics", "microsoft.eventhub/namespaces", - "microsoft.keyvault/vaults", "microsoft.keyvault/managedhsms", + "microsoft.keyvault/vaults", + "microsoft.kusto/clusters", + "microsoft.loadtestservice/loadtests", + "microsoft.machinelearningservices/registries", "microsoft.machinelearningservices/workspaces", "microsoft.media/mediaservices", "microsoft.media/videoanalyzers", + "microsoft.media/mediaservices/liveevents", + "microsoft.media/mediaservices/streamingendpoints", "microsoft.netapp/netappaccounts/capacitypools/volumes", + "microsoft.network/bastionhosts", + "microsoft.network/frontdoors", + "microsoft.network/networkmanagers", + "microsoft.network/networkmanagers/ipampools", + "microsoft.network/p2svpngateways", "microsoft.network/publicipaddresses", + "microsoft.network/publicipprefixes", "microsoft.network/virtualnetworkgateways", - "microsoft.network/p2svpngateways", - "microsoft.network/frontdoors", - "microsoft.network/bastionhosts", + "microsoft.networkanalytics/dataproducts", + "microsoft.notificationhubs/namespaces", + "microsoft.notificationhubs/namespaces/notificationhubs", "microsoft.operationalinsights/workspaces", "microsoft.purview/accounts", + "microsoft.search/searchservices", "microsoft.servicebus/namespaces", "microsoft.signalrservice/signalr", "microsoft.signalrservice/webpubsub", + "microsoft.sql/managedinstances", "microsoft.sql/servers/databases", - "microsoft.sql/managedinstances" + "microsoft.synapse/workspaces", + "microsoft.synapse/workspaces/bigdatapools", + "microsoft.synapse/workspaces/kustopools", + "microsoft.synapse/workspaces/scopepools", + "microsoft.synapse/workspaces/sqlpools", + "microsoft.web/hostingenvironments", + "microsoft.workloads/sapvirtualinstances" ], "defaultValue": [ + "microsoft.aad/domainservices", "microsoft.agfoodplatform/farmbeats", "microsoft.apimanagement/service", + "microsoft.app/managedenvironments", "microsoft.appconfiguration/configurationstores", "microsoft.attestation/attestationproviders", "microsoft.automation/automationaccounts", "microsoft.avs/privateclouds", + "microsoft.azureplaywrightservice/accounts", + "microsoft.azuresphere/catalogs", + "microsoft.batch/batchaccounts", "microsoft.cache/redis", + "microsoft.cache/redisenterprise/databases", "microsoft.cdn/profiles", + "microsoft.chaos/experiments", + "microsoft.codesigning/codesigningaccounts", "microsoft.cognitiveservices/accounts", + "microsoft.community/communitytrainings", + "microsoft.confidentialledger/managedccfs", "microsoft.containerregistry/registries", + "microsoft.dashboard/grafana", + "microsoft.dbformysql/flexibleservers", + "microsoft.dbforpostgresql/flexibleservers", + "microsoft.devcenter/devcenters", "microsoft.devices/iothubs", - "microsoft.eventgrid/topics", + "microsoft.documentdb/cassandraclusters", + "microsoft.documentdb/databaseaccounts", + "microsoft.documentdb/mongoclusters", "microsoft.eventgrid/domains", "microsoft.eventgrid/partnernamespaces", + "microsoft.eventgrid/topics", "microsoft.eventhub/namespaces", - "microsoft.keyvault/vaults", "microsoft.keyvault/managedhsms", + "microsoft.keyvault/vaults", + "microsoft.kusto/clusters", + "microsoft.loadtestservice/loadtests", + "microsoft.machinelearningservices/registries", "microsoft.machinelearningservices/workspaces", "microsoft.media/mediaservices", "microsoft.media/videoanalyzers", + "microsoft.media/mediaservices/liveevents", + "microsoft.media/mediaservices/streamingendpoints", "microsoft.netapp/netappaccounts/capacitypools/volumes", + "microsoft.network/bastionhosts", + "microsoft.network/frontdoors", + "microsoft.network/networkmanagers", + "microsoft.network/networkmanagers/ipampools", + "microsoft.network/p2svpngateways", "microsoft.network/publicipaddresses", + "microsoft.network/publicipprefixes", "microsoft.network/virtualnetworkgateways", - "microsoft.network/p2svpngateways", - "microsoft.network/frontdoors", - "microsoft.network/bastionhosts", + "microsoft.networkanalytics/dataproducts", + "microsoft.notificationhubs/namespaces", + "microsoft.notificationhubs/namespaces/notificationhubs", "microsoft.operationalinsights/workspaces", "microsoft.purview/accounts", + "microsoft.search/searchservices", "microsoft.servicebus/namespaces", "microsoft.signalrservice/signalr", "microsoft.signalrservice/webpubsub", + "microsoft.sql/managedinstances", "microsoft.sql/servers/databases", - "microsoft.sql/managedinstances" + "microsoft.synapse/workspaces", + "microsoft.synapse/workspaces/bigdatapools", + "microsoft.synapse/workspaces/kustopools", + "microsoft.synapse/workspaces/scopepools", + "microsoft.synapse/workspaces/sqlpools", + "microsoft.web/hostingenvironments", + "microsoft.workloads/sapvirtualinstances" ] } }, "policyDefinitions": [ + { + "policyDefinitionReferenceId": "aad-domainservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1bd91eae-4429-4f23-b780-8c9622e023e3", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.aad/domainservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, { "policyDefinitionReferenceId": "agfoodplatform-farmbeats", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f969646f-b6b8-45a0-b736-bf9b4bb933dc", @@ -174,6 +266,28 @@ } } }, + { + "policyDefinitionReferenceId": "app-managedenvironments", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6a664864-e2b5-413e-b930-f11caa132f16", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.app/managedenvironments'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, { "policyDefinitionReferenceId": "appconfiguration-configurationstores", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4b05de63-3ad2-4f6d-b421-da21f1328f3b", @@ -262,6 +376,72 @@ } } }, + { + "policyDefinitionReferenceId": "azureplaywrightservice-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/81039988-1f84-4aa6-8039-0a64c2a301b4", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.azureplaywrightservice/accounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "azuresphere-catalogs", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bbf47f27-95e4-46a0-82e1-898ce046d857", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.azuresphere/catalogs'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "batch-batchaccounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9fcae8ed-246a-407b-8f75-f3500ff2c9db", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.batch/batchaccounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, { "policyDefinitionReferenceId": "cache-redis", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/aec4c33f-2f2a-4fd3-91cd-24a939513c60", @@ -284,6 +464,28 @@ } } }, + { + "policyDefinitionReferenceId": "cache-redisenterprise-databases", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fa570aa1-acca-4eea-8e5a-233cf2c5e4c2", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cache/redisenterprise/databases'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, { "policyDefinitionReferenceId": "cdn-profiles", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6201aeb7-2b5c-4671-8ab4-5d3ba4d77f3b", @@ -307,12 +509,12 @@ } }, { - "policyDefinitionReferenceId": "cognitiveservices-accounts", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/55d1f543-d1b0-4811-9663-d6d0dbc6326d", + "policyDefinitionReferenceId": "chaos-experiments", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/39078c44-b8d4-4c7d-8579-7f021d326ebf", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cognitiveservices/accounts'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.chaos/experiments'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -329,12 +531,12 @@ } }, { - "policyDefinitionReferenceId": "containerregistry-registries", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/56288eb2-4350-461d-9ece-2bb242269dce", + "policyDefinitionReferenceId": "codesigning-codesigningaccounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/958060c2-8d8e-478e-b3ec-d3d2249b461c", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.containerregistry/registries'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.codesigning/codesigningaccounts'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -351,12 +553,12 @@ } }, { - "policyDefinitionReferenceId": "devices-iothubs", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/614d9fbd-68cd-4832-96db-3362069661b2", + "policyDefinitionReferenceId": "cognitiveservices-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/55d1f543-d1b0-4811-9663-d6d0dbc6326d", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.devices/iothubs'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cognitiveservices/accounts'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -373,12 +575,12 @@ } }, { - "policyDefinitionReferenceId": "eventgrid-topics", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/46b2dd5d-3936-4347-8908-b298ea4466d3", + "policyDefinitionReferenceId": "community-communitytrainings", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0509e2d8-d657-4563-a7c8-b88b9180a6e8", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/topics'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.community/communitytrainings'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -395,12 +597,12 @@ } }, { - "policyDefinitionReferenceId": "eventgrid-domains", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b90ec596-faa6-4c61-9515-34085703e260", + "policyDefinitionReferenceId": "confidentialledger-managedccfs", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b6f29e6b-4b21-4bb6-a997-38592fa02864", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/domains'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.confidentialledger/managedccfs'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -417,12 +619,12 @@ } }, { - "policyDefinitionReferenceId": "eventgrid-partnernamespaces", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3496f6fd-57ba-485c-8a14-183c4493b781", + "policyDefinitionReferenceId": "containerregistry-registries", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/56288eb2-4350-461d-9ece-2bb242269dce", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/partnernamespaces'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.containerregistry/registries'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -439,12 +641,12 @@ } }, { - "policyDefinitionReferenceId": "eventhub-namespaces", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/441af8bf-7c88-4efc-bd24-b7be28d4acce", + "policyDefinitionReferenceId": "dashboard-grafana", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d98f63ed-e319-4dc3-898f-600953a05f7e", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventhub/namespaces'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dashboard/grafana'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -461,12 +663,12 @@ } }, { - "policyDefinitionReferenceId": "keyvault-vaults", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6b359d8f-f88d-4052-aa7c-32015963ecc1", + "policyDefinitionReferenceId": "dbformysql-flexibleservers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7860f3fe-0db3-42d4-bf3d-7042ea5e5787", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.keyvault/vaults'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dbformysql/flexibleservers'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -483,12 +685,12 @@ } }, { - "policyDefinitionReferenceId": "keyvault-managedhsms", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b88bfd90-4da5-43eb-936f-ae1481924291", + "policyDefinitionReferenceId": "dbforpostgresql-flexibleservers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5fbd326d-328c-414e-a922-2d6963998962", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.keyvault/managedhsms'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dbforpostgresql/flexibleservers'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -505,12 +707,12 @@ } }, { - "policyDefinitionReferenceId": "machinelearningservices-workspaces", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/90c90eda-bfe7-4c67-bf26-410420ed1047", + "policyDefinitionReferenceId": "devcenter-devcenters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/82b076b9-2062-4516-ae4c-37b1890eabb2", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.machinelearningservices/workspaces'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.devcenter/devcenters'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -527,12 +729,12 @@ } }, { - "policyDefinitionReferenceId": "media-mediaservices", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/69214fad-6742-49a9-8f71-ee9d269364ab", + "policyDefinitionReferenceId": "devices-iothubs", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/614d9fbd-68cd-4832-96db-3362069661b2", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/mediaservices'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.devices/iothubs'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -549,12 +751,12 @@ } }, { - "policyDefinitionReferenceId": "media-videoanalyzers", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/34c7546c-d637-4b5d-96ab-93fb6ed07af8", + "policyDefinitionReferenceId": "documentdb-cassandraclusters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ae0fc3d3-c9ce-43e8-923a-a143db56d81e", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/videoanalyzers'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.documentdb/cassandraclusters'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -571,12 +773,12 @@ } }, { - "policyDefinitionReferenceId": "netapp-netappaccounts-capacitypools-volumes", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c3b912c2-7f5b-47ac-bd52-8c85a7667961", + "policyDefinitionReferenceId": "documentdb-databaseaccounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/68ba9fc9-71b9-4e6f-9cf5-ecc07722324c", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.netapp/netappaccounts/capacitypools/volumes'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.documentdb/databaseaccounts'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -593,12 +795,12 @@ } }, { - "policyDefinitionReferenceId": "network-publicipaddresses", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1513498c-3091-461a-b321-e9b433218d28", + "policyDefinitionReferenceId": "documentdb-mongoclusters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/064a3695-3197-4354-816b-65c7b952db9e", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/publicipaddresses'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.documentdb/mongoclusters'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -615,12 +817,12 @@ } }, { - "policyDefinitionReferenceId": "network-virtualnetworkgateways", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ed6ae75a-828f-4fea-88fd-dead1145f1dd", + "policyDefinitionReferenceId": "eventgrid-domains", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b90ec596-faa6-4c61-9515-34085703e260", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/virtualnetworkgateways'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/domains'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -637,12 +839,12 @@ } }, { - "policyDefinitionReferenceId": "network-p2svpngateways", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cac9e1c5-c3cb-47fa-8d4c-88b8559262d2", + "policyDefinitionReferenceId": "eventgrid-partnernamespaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3496f6fd-57ba-485c-8a14-183c4493b781", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/p2svpngateways'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/partnernamespaces'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -659,12 +861,12 @@ } }, { - "policyDefinitionReferenceId": "network-frontdoors", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e9c56c41-d453-4a80-af93-2331afeb3d82", + "policyDefinitionReferenceId": "eventgrid-topics", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/46b2dd5d-3936-4347-8908-b298ea4466d3", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/frontdoors'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/topics'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -681,12 +883,12 @@ } }, { - "policyDefinitionReferenceId": "network-bastionhosts", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f8352124-56fa-4f94-9441-425109cdc14b", + "policyDefinitionReferenceId": "eventhub-namespaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/441af8bf-7c88-4efc-bd24-b7be28d4acce", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/bastionhosts'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventhub/namespaces'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -703,12 +905,12 @@ } }, { - "policyDefinitionReferenceId": "operationalinsights-workspaces", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/818719e5-1338-4776-9a9d-3c31e4df5986", + "policyDefinitionReferenceId": "keyvault-managedhsms", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b88bfd90-4da5-43eb-936f-ae1481924291", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.operationalinsights/workspaces'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.keyvault/managedhsms'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -725,12 +927,12 @@ } }, { - "policyDefinitionReferenceId": "purview-accounts", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4cabf9fc-4ed1-4990-bbaf-7248fb8751bc", + "policyDefinitionReferenceId": "keyvault-vaults", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6b359d8f-f88d-4052-aa7c-32015963ecc1", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.purview/accounts'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.keyvault/vaults'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -747,12 +949,12 @@ } }, { - "policyDefinitionReferenceId": "servicebus-namespaces", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0277b2d5-6e6f-4d97-9929-a5c4eab56fd7", + "policyDefinitionReferenceId": "kusto-clusters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a819f227-229d-44cb-8ad6-25becdb4451f", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.servicebus/namespaces'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.kusto/clusters'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -769,12 +971,12 @@ } }, { - "policyDefinitionReferenceId": "signalrservice-signalr", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/93a604fe-0ec2-4a99-ab8c-7ef08f05555a", + "policyDefinitionReferenceId": "loadtestservice-loadtests", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/75a112bc-759f-4f29-83cc-799019db39c3", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.signalrservice/signalr'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.loadtestservice/loadtests'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -791,12 +993,12 @@ } }, { - "policyDefinitionReferenceId": "signalrservice-webpubsub", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0da6faeb-d6c6-4f6e-9f49-06277493270b", + "policyDefinitionReferenceId": "machinelearningservices-registries", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/33835ef6-bc67-4bde-bf5f-5a857f195a57", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.signalrservice/webpubsub'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.machinelearningservices/registries'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -813,12 +1015,12 @@ } }, { - "policyDefinitionReferenceId": "sql-servers-databases", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6567d3f3-42d0-4cfb-9606-9741ba60fa07", + "policyDefinitionReferenceId": "machinelearningservices-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/90c90eda-bfe7-4c67-bf26-410420ed1047", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.sql/servers/databases'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.machinelearningservices/workspaces'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -835,12 +1037,12 @@ } }, { - "policyDefinitionReferenceId": "sql-managedinstances", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8fc4ca5f-6abc-4b30-9565-0bd91ac49420", + "policyDefinitionReferenceId": "media-mediaservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/69214fad-6742-49a9-8f71-ee9d269364ab", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.sql/managedinstances'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/mediaservices'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -855,10 +1057,673 @@ "value": "[parameters('logAnalytics')]" } } - } - ], - "versions": [ - "1.0.0" - ] - } + }, + { + "policyDefinitionReferenceId": "media-videoanalyzers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/34c7546c-d637-4b5d-96ab-93fb6ed07af8", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/videoanalyzers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "media-mediaservices-liveevents", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5d487647-6a53-4839-8eb8-edccf5e6bf1d", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/mediaservices/liveevents'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "media-mediaservices-streamingendpoints", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/be26ca28-761d-4538-b78a-975eb47c680c", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/mediaservices/streamingendpoints'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "netapp-netappaccounts-capacitypools-volumes", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c3b912c2-7f5b-47ac-bd52-8c85a7667961", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.netapp/netappaccounts/capacitypools/volumes'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-bastionhosts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f8352124-56fa-4f94-9441-425109cdc14b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/bastionhosts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-frontdoors", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e9c56c41-d453-4a80-af93-2331afeb3d82", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/frontdoors'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-networkmanagers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/23673f24-2594-43e9-9983-60a0be21bd76", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/networkmanagers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-networkmanagers-ipampools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6ee1c58c-a123-4cd6-8643-48b2f7ffb3e1", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/networkmanagers/ipampools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-p2svpngateways", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cac9e1c5-c3cb-47fa-8d4c-88b8559262d2", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/p2svpngateways'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-publicipaddresses", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1513498c-3091-461a-b321-e9b433218d28", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/publicipaddresses'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-publicipprefixes", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b55f2e8e-dc76-4262-a0e3-45f02200ff0e", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/publicipprefixes'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-virtualnetworkgateways", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ed6ae75a-828f-4fea-88fd-dead1145f1dd", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/virtualnetworkgateways'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "networkanalytics-dataproducts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0e861bb0-d926-4cdb-b2d6-d59336b8f5b3", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.networkanalytics/dataproducts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "notificationhubs-namespaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/69e0da8f-ca50-479d-b1a8-33a31426c512", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.notificationhubs/namespaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "notificationhubs-namespaces-notificationhubs", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/54c7cff6-a032-43e1-9656-d4c24665f805", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.notificationhubs/namespaces/notificationhubs'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "operationalinsights-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/818719e5-1338-4776-9a9d-3c31e4df5986", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.operationalinsights/workspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "purview-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4cabf9fc-4ed1-4990-bbaf-7248fb8751bc", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.purview/accounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "search-searchservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8def4bdd-4362-4ed6-a26f-7bf8f2c58839", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.search/searchservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "servicebus-namespaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0277b2d5-6e6f-4d97-9929-a5c4eab56fd7", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.servicebus/namespaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "signalrservice-signalr", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/93a604fe-0ec2-4a99-ab8c-7ef08f05555a", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.signalrservice/signalr'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "signalrservice-webpubsub", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0da6faeb-d6c6-4f6e-9f49-06277493270b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.signalrservice/webpubsub'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "sql-managedinstances", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8fc4ca5f-6abc-4b30-9565-0bd91ac49420", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.sql/managedinstances'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "sql-servers-databases", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6567d3f3-42d0-4cfb-9606-9741ba60fa07", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.sql/servers/databases'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/305408ed-dd5a-43b9-80c1-9eea87a176bb", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces-bigdatapools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/29565b0a-e1b5-49c1-94bf-b8b258656460", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces/bigdatapools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces-kustopools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/887dc342-c6bd-418b-9407-ab0e27deba36", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces/kustopools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces-scopepools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f018b68f-d953-4238-81a3-94a0f39507e3", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces/scopepools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces-sqlpools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a271e156-b295-4537-b01d-09675d9e7851", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces/sqlpools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "web-hostingenvironments", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9dc3e252-1cff-4ae5-bcad-5a92b7167d43", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.web/hostingenvironments'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + }, + { + "policyDefinitionReferenceId": "workloads-sapvirtualinstances", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1568dd08-cca0-4073-bfd8-e08a7fdc543e", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.workloads/sapvirtualinstances'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocationList": { + "value": "[parameters('resourceLocationList')]" + }, + "logAnalytics": { + "value": "[parameters('logAnalytics')]" + } + } + } + ], + "versions": [ + "1.1.0", + "1.0.0" + ] + }, + "name": "f5b29bc4-feca-4cc6-a58a-772dd5e290a5", + "id": "/providers/Microsoft.Authorization/policySetDefinitions/f5b29bc4-feca-4cc6-a58a-772dd5e290a5" } \ No newline at end of file diff --git a/built-in-policies/policySetDefinitions/Monitoring/AzureMonitor_DiagSettings_storage_allLogs.json b/built-in-policies/policySetDefinitions/Monitoring/AzureMonitor_DiagSettings_storage_allLogs.json new file mode 100644 index 000000000..4b17f9ff7 --- /dev/null +++ b/built-in-policies/policySetDefinitions/Monitoring/AzureMonitor_DiagSettings_storage_allLogs.json @@ -0,0 +1,3429 @@ +{ + "properties": { + "displayName": "Enable allLogs category group resource logging for supported resources to storage", + "description": "Resource logs should be enabled to track activities and events that take place on your resources and give you visibility and insights into any changes that occur. This initiative deploys diagnostic setting using the allLogs category group to route logs to storage for all supported resources.", + "policyType": "BuiltIn", + "version": "1.0.0", + "metadata": { + "category": "Monitoring", + "version": "1.0.0" + }, + "parameters": { + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Enable or disable the execution of the policy" + }, + "allowedValues": [ + "DeployIfNotExists", + "AuditIfNotExists", + "Disabled" + ], + "defaultValue": "DeployIfNotExists" + }, + "diagnosticSettingName": { + "type": "string", + "metadata": { + "displayName": "Diagnostic Setting Name", + "description": "Diagnostic Setting Name" + }, + "defaultValue": "setByPolicy-Storage" + }, + "resourceLocation": { + "type": "string", + "metadata": { + "displayName": "Resource Location", + "description": "Resource Location must be in the same location as the Storage Account.", + "strongType": "location" + } + }, + "storageAccount": { + "type": "string", + "metadata": { + "displayName": "Storage Account", + "description": "Full path (resourceId) to the storage account.", + "assignPermissions": true + } + }, + "resourceTypeList": { + "type": "array", + "metadata": { + "displayName": "Resource Types", + "description": "List of Resource Types to be evaluated for diagnostic setting existence." + }, + "allowedValues": [ + "microsoft.aad/domainservices", + "microsoft.agfoodplatform/farmbeats", + "microsoft.analysisservices/servers", + "microsoft.apimanagement/service", + "microsoft.app/managedenvironments", + "microsoft.appconfiguration/configurationstores", + "microsoft.appplatform/spring", + "microsoft.attestation/attestationproviders", + "microsoft.automation/automationaccounts", + "microsoft.autonomousdevelopmentplatform/workspaces", + "microsoft.avs/privateclouds", + "microsoft.azureplaywrightservice/accounts", + "microsoft.azuresphere/catalogs", + "microsoft.batch/batchaccounts", + "microsoft.botservice/botservices", + "microsoft.cache/redis", + "microsoft.cache/redisenterprise/databases", + "microsoft.cdn/cdnwebapplicationfirewallpolicies", + "microsoft.cdn/profiles", + "microsoft.cdn/profiles/endpoints", + "microsoft.chaos/experiments", + "microsoft.classicnetwork/networksecuritygroups", + "microsoft.cloudtest/hostedpools", + "microsoft.codesigning/codesigningaccounts", + "microsoft.cognitiveservices/accounts", + "microsoft.communication/communicationservices", + "microsoft.community/communitytrainings", + "microsoft.confidentialledger/managedccfs", + "microsoft.connectedcache/enterprisemcccustomers", + "microsoft.connectedcache/ispcustomers", + "microsoft.containerinstance/containergroups", + "microsoft.containerregistry/registries", + "microsoft.customproviders/resourceproviders", + "microsoft.d365customerinsights/instances", + "microsoft.dashboard/grafana", + "microsoft.databricks/workspaces", + "microsoft.datafactory/factories", + "microsoft.datalakeanalytics/accounts", + "microsoft.datalakestore/accounts", + "microsoft.dataprotection/backupvaults", + "microsoft.datashare/accounts", + "microsoft.dbformariadb/servers", + "microsoft.dbformysql/flexibleservers", + "microsoft.dbformysql/servers", + "microsoft.dbforpostgresql/flexibleservers", + "microsoft.dbforpostgresql/servergroupsv2", + "microsoft.dbforpostgresql/servers", + "microsoft.desktopvirtualization/applicationgroups", + "microsoft.desktopvirtualization/hostpools", + "microsoft.desktopvirtualization/scalingplans", + "microsoft.desktopvirtualization/workspaces", + "microsoft.devcenter/devcenters", + "microsoft.devices/iothubs", + "microsoft.devices/provisioningservices", + "microsoft.digitaltwins/digitaltwinsinstances", + "microsoft.documentdb/cassandraclusters", + "microsoft.documentdb/databaseaccounts", + "microsoft.documentdb/mongoclusters", + "microsoft.eventgrid/domains", + "microsoft.eventgrid/partnernamespaces", + "microsoft.eventgrid/partnertopics", + "microsoft.eventgrid/systemtopics", + "microsoft.eventgrid/topics", + "microsoft.eventhub/namespaces", + "microsoft.experimentation/experimentworkspaces", + "microsoft.healthcareapis/services", + "microsoft.healthcareapis/workspaces/dicomservices", + "microsoft.healthcareapis/workspaces/fhirservices", + "microsoft.healthcareapis/workspaces/iotconnectors", + "microsoft.insights/autoscalesettings", + "microsoft.insights/components", + "microsoft.insights/datacollectionrules", + "microsoft.keyvault/managedhsms", + "microsoft.keyvault/vaults", + "microsoft.kusto/clusters", + "microsoft.loadtestservice/loadtests", + "microsoft.logic/integrationaccounts", + "microsoft.logic/workflows", + "microsoft.machinelearningservices/registries", + "microsoft.machinelearningservices/workspaces", + "microsoft.machinelearningservices/workspaces/onlineendpoints", + "microsoft.managednetworkfabric/networkdevices", + "microsoft.media/mediaservices", + "microsoft.media/videoanalyzers", + "microsoft.media/mediaservices/liveevents", + "microsoft.media/mediaservices/streamingendpoints", + "microsoft.netapp/netappaccounts/capacitypools/volumes", + "microsoft.network/applicationgateways", + "microsoft.network/azurefirewalls", + "microsoft.network/bastionhosts", + "microsoft.network/dnsresolverpolicies", + "microsoft.network/expressroutecircuits", + "microsoft.network/frontdoors", + "microsoft.network/loadbalancers", + "microsoft.network/networkmanagers", + "microsoft.network/networkmanagers/ipampools", + "microsoft.network/networksecuritygroups", + "microsoft.network/networksecurityperimeters", + "microsoft.network/p2svpngateways", + "microsoft.network/publicipaddresses", + "microsoft.network/publicipprefixes", + "microsoft.network/trafficmanagerprofiles", + "microsoft.network/virtualnetworkgateways", + "microsoft.network/virtualnetworks", + "microsoft.network/vpngateways", + "microsoft.networkanalytics/dataproducts", + "microsoft.networkcloud/baremetalmachines", + "microsoft.networkcloud/clusters", + "microsoft.networkcloud/storageappliances", + "microsoft.networkfunction/azuretrafficcollectors", + "microsoft.notificationhubs/namespaces", + "microsoft.notificationhubs/namespaces/notificationhubs", + "microsoft.openenergyplatform/energyservices", + "microsoft.operationalinsights/workspaces", + "microsoft.powerbi/tenants/workspaces", + "microsoft.powerbidedicated/capacities", + "microsoft.purview/accounts", + "microsoft.recoveryservices/vaults", + "microsoft.relay/namespaces", + "microsoft.search/searchservices", + "microsoft.servicebus/namespaces", + "microsoft.servicenetworking/trafficcontrollers", + "microsoft.signalrservice/signalr", + "microsoft.signalrservice/webpubsub", + "microsoft.sql/managedinstances", + "microsoft.sql/managedinstances/databases", + "microsoft.sql/servers/databases", + "microsoft.storagecache/caches", + "microsoft.storagemover/storagemovers", + "microsoft.streamanalytics/streamingjobs", + "microsoft.synapse/workspaces", + "microsoft.synapse/workspaces/bigdatapools", + "microsoft.synapse/workspaces/kustopools", + "microsoft.synapse/workspaces/scopepools", + "microsoft.synapse/workspaces/sqlpools", + "microsoft.timeseriesinsights/environments", + "microsoft.timeseriesinsights/environments/eventsources", + "microsoft.videoindexer/accounts", + "microsoft.web/hostingenvironments", + "microsoft.workloads/sapvirtualinstances" + ], + "defaultValue": [ + "microsoft.aad/domainservices", + "microsoft.agfoodplatform/farmbeats", + "microsoft.analysisservices/servers", + "microsoft.apimanagement/service", + "microsoft.app/managedenvironments", + "microsoft.appconfiguration/configurationstores", + "microsoft.appplatform/spring", + "microsoft.attestation/attestationproviders", + "microsoft.automation/automationaccounts", + "microsoft.autonomousdevelopmentplatform/workspaces", + "microsoft.avs/privateclouds", + "microsoft.azureplaywrightservice/accounts", + "microsoft.azuresphere/catalogs", + "microsoft.batch/batchaccounts", + "microsoft.botservice/botservices", + "microsoft.cache/redis", + "microsoft.cache/redisenterprise/databases", + "microsoft.cdn/cdnwebapplicationfirewallpolicies", + "microsoft.cdn/profiles", + "microsoft.cdn/profiles/endpoints", + "microsoft.chaos/experiments", + "microsoft.classicnetwork/networksecuritygroups", + "microsoft.cloudtest/hostedpools", + "microsoft.codesigning/codesigningaccounts", + "microsoft.cognitiveservices/accounts", + "microsoft.communication/communicationservices", + "microsoft.community/communitytrainings", + "microsoft.confidentialledger/managedccfs", + "microsoft.connectedcache/enterprisemcccustomers", + "microsoft.connectedcache/ispcustomers", + "microsoft.containerinstance/containergroups", + "microsoft.containerregistry/registries", + "microsoft.customproviders/resourceproviders", + "microsoft.d365customerinsights/instances", + "microsoft.dashboard/grafana", + "microsoft.databricks/workspaces", + "microsoft.datafactory/factories", + "microsoft.datalakeanalytics/accounts", + "microsoft.datalakestore/accounts", + "microsoft.dataprotection/backupvaults", + "microsoft.datashare/accounts", + "microsoft.dbformariadb/servers", + "microsoft.dbformysql/flexibleservers", + "microsoft.dbformysql/servers", + "microsoft.dbforpostgresql/flexibleservers", + "microsoft.dbforpostgresql/servergroupsv2", + "microsoft.dbforpostgresql/servers", + "microsoft.desktopvirtualization/applicationgroups", + "microsoft.desktopvirtualization/hostpools", + "microsoft.desktopvirtualization/scalingplans", + "microsoft.desktopvirtualization/workspaces", + "microsoft.devcenter/devcenters", + "microsoft.devices/iothubs", + "microsoft.devices/provisioningservices", + "microsoft.digitaltwins/digitaltwinsinstances", + "microsoft.documentdb/cassandraclusters", + "microsoft.documentdb/databaseaccounts", + "microsoft.documentdb/mongoclusters", + "microsoft.eventgrid/domains", + "microsoft.eventgrid/partnernamespaces", + "microsoft.eventgrid/partnertopics", + "microsoft.eventgrid/systemtopics", + "microsoft.eventgrid/topics", + "microsoft.eventhub/namespaces", + "microsoft.experimentation/experimentworkspaces", + "microsoft.healthcareapis/services", + "microsoft.healthcareapis/workspaces/dicomservices", + "microsoft.healthcareapis/workspaces/fhirservices", + "microsoft.healthcareapis/workspaces/iotconnectors", + "microsoft.insights/autoscalesettings", + "microsoft.insights/components", + "microsoft.insights/datacollectionrules", + "microsoft.keyvault/managedhsms", + "microsoft.keyvault/vaults", + "microsoft.kusto/clusters", + "microsoft.loadtestservice/loadtests", + "microsoft.logic/integrationaccounts", + "microsoft.logic/workflows", + "microsoft.machinelearningservices/registries", + "microsoft.machinelearningservices/workspaces", + "microsoft.machinelearningservices/workspaces/onlineendpoints", + "microsoft.managednetworkfabric/networkdevices", + "microsoft.media/mediaservices", + "microsoft.media/videoanalyzers", + "microsoft.media/mediaservices/liveevents", + "microsoft.media/mediaservices/streamingendpoints", + "microsoft.netapp/netappaccounts/capacitypools/volumes", + "microsoft.network/applicationgateways", + "microsoft.network/azurefirewalls", + "microsoft.network/bastionhosts", + "microsoft.network/dnsresolverpolicies", + "microsoft.network/expressroutecircuits", + "microsoft.network/frontdoors", + "microsoft.network/loadbalancers", + "microsoft.network/networkmanagers", + "microsoft.network/networkmanagers/ipampools", + "microsoft.network/networksecuritygroups", + "microsoft.network/networksecurityperimeters", + "microsoft.network/p2svpngateways", + "microsoft.network/publicipaddresses", + "microsoft.network/publicipprefixes", + "microsoft.network/trafficmanagerprofiles", + "microsoft.network/virtualnetworkgateways", + "microsoft.network/virtualnetworks", + "microsoft.network/vpngateways", + "microsoft.networkanalytics/dataproducts", + "microsoft.networkcloud/baremetalmachines", + "microsoft.networkcloud/clusters", + "microsoft.networkcloud/storageappliances", + "microsoft.networkfunction/azuretrafficcollectors", + "microsoft.notificationhubs/namespaces", + "microsoft.notificationhubs/namespaces/notificationhubs", + "microsoft.openenergyplatform/energyservices", + "microsoft.operationalinsights/workspaces", + "microsoft.powerbi/tenants/workspaces", + "microsoft.powerbidedicated/capacities", + "microsoft.purview/accounts", + "microsoft.recoveryservices/vaults", + "microsoft.relay/namespaces", + "microsoft.search/searchservices", + "microsoft.servicebus/namespaces", + "microsoft.servicenetworking/trafficcontrollers", + "microsoft.signalrservice/signalr", + "microsoft.signalrservice/webpubsub", + "microsoft.sql/managedinstances", + "microsoft.sql/managedinstances/databases", + "microsoft.sql/servers/databases", + "microsoft.storagecache/caches", + "microsoft.storagemover/storagemovers", + "microsoft.streamanalytics/streamingjobs", + "microsoft.synapse/workspaces", + "microsoft.synapse/workspaces/bigdatapools", + "microsoft.synapse/workspaces/kustopools", + "microsoft.synapse/workspaces/scopepools", + "microsoft.synapse/workspaces/sqlpools", + "microsoft.timeseriesinsights/environments", + "microsoft.timeseriesinsights/environments/eventsources", + "microsoft.videoindexer/accounts", + "microsoft.web/hostingenvironments", + "microsoft.workloads/sapvirtualinstances" + ] + } + }, + "policyDefinitions": [ + { + "policyDefinitionReferenceId": "aad-domainservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9c79e60b-99f2-49f3-b08c-630d269bddc1", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.aad/domainservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "agfoodplatform-farmbeats", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0f708273-cf83-4d29-b31b-ebaf8d0eb8c2", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.agfoodplatform/farmbeats'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "analysisservices-servers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/434b25a4-5396-41ec-97aa-1f4ae3bf269d", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.analysisservices/servers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "apimanagement-service", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6f3f5778-f809-4755-9d8f-bd5a5a7add85", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.apimanagement/service'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "app-managedenvironments", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a26c842f-bee7-4a1f-9ae1-a973d3a0075a", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.app/managedenvironments'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "appconfiguration-configurationstores", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2e8a8853-917a-4d26-9c3a-c92a7fa031e8", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.appconfiguration/configurationstores'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "appplatform-spring", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5b67d7f3-488f-42df-ab16-e38a913fcdba", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.appplatform/spring'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "attestation-attestationproviders", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/39741c6f-5e8b-4511-bba4-6662d0e0e2ac", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.attestation/attestationproviders'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "automation-automationaccounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/07c818eb-df75-4465-9233-6a8667e86670", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.automation/automationaccounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "autonomousdevelopmentplatform-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9df7e623-1f7c-47fa-9db6-777c9a3f2636", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.autonomousdevelopmentplatform/workspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "avs-privateclouds", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/50cebe4c-8021-4f07-bcb2-6c80622444a9", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.avs/privateclouds'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "azureplaywrightservice-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2e3285f9-ae82-4f69-b83f-5b6f1ee69f3a", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.azureplaywrightservice/accounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "azuresphere-catalogs", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9b6f89db-876b-4156-9f9b-f29dcf302ad2", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.azuresphere/catalogs'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "batch-batchaccounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/40f0d036-d73d-45a9-8c3d-f3f84d227193", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.batch/batchaccounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "botservice-botservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e97f20f4-8bf0-4a35-a319-38f4144228f5", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.botservice/botservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "cache-redis", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d3e11828-02c8-40d2-a518-ad01508bb4d7", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cache/redis'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "cache-redisenterprise-databases", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e76ef589-c7d6-42cf-a61a-13471f6f50cd", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cache/redisenterprise/databases'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "cdn-cdnwebapplicationfirewallpolicies", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4d46b9c1-0a86-41bf-aaf2-74d0ebf8ce66", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cdn/cdnwebapplicationfirewallpolicies'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "cdn-profiles", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9f4e810a-899e-4e5e-8174-abfcf15739a3", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cdn/profiles'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "cdn-profiles-endpoints", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ee64264d-f9e3-4a0e-bbe2-db4319aeaf42", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cdn/profiles/endpoints'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "chaos-experiments", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1cd30d13-d34c-4cb8-8f9d-4692f7d40d97", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.chaos/experiments'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "classicnetwork-networksecuritygroups", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6f7fa8b1-4456-4d4c-94c2-1f1651b18235", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.classicnetwork/networksecuritygroups'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "cloudtest-hostedpools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b15247e4-f83b-48b2-b34e-8ea6148a0f34", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cloudtest/hostedpools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "codesigning-codesigningaccounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/42e5ad1f-57fd-49a7-b0e4-c7a7ae25ba3d", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.codesigning/codesigningaccounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "cognitiveservices-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/14e81583-c89c-47db-af0d-f9ddddcccd9f", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cognitiveservices/accounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "communication-communicationservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b9c8d1de-593f-472f-b32a-7e2fe0c2374a", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.communication/communicationservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "community-communitytrainings", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2eb903dd-4881-4284-a31d-4bae3f053946", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.community/communitytrainings'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "confidentialledger-managedccfs", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0eb11858-8d9f-4525-b9ab-cc5eab07d27a", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.confidentialledger/managedccfs'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "connectedcache-enterprisemcccustomers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b70d4e3a-b1d5-4432-b058-7ea0a4c02a4e", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.connectedcache/enterprisemcccustomers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "connectedcache-ispcustomers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/18009236-18d3-48e3-bd21-4e7630153611", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.connectedcache/ispcustomers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "containerinstance-containergroups", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c600af08-49ff-4f7a-b5c9-0686749387b7", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.containerinstance/containergroups'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "containerregistry-registries", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/106cd3bd-50a1-466c-869f-f9c2d310477b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.containerregistry/registries'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "customproviders-resourceproviders", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7646801f-46d5-48d0-9e18-efb884944f3e", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.customproviders/resourceproviders'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "d365customerinsights-instances", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4c67a1c0-8e77-4f4b-b572-5c11695aae2d", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.d365customerinsights/instances'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "dashboard-grafana", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a78631da-8506-4113-96f4-2805de193083", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dashboard/grafana'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "databricks-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/50ca36f4-5306-4275-ad42-a40ca2805c77", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.databricks/workspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "datafactory-factories", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/271ccc7b-8334-48c5-b90b-edf37dfb2d00", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.datafactory/factories'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "datalakeanalytics-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1bd3a451-9f38-43e5-aed3-bede117c3055", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.datalakeanalytics/accounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "datalakestore-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a5385dba-3caf-43da-8804-c68174d315a7", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.datalakestore/accounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "dataprotection-backupvaults", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/60af09fa-d167-44da-9bfc-21a49546a7b5", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dataprotection/backupvaults'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "datashare-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/852877d5-b61d-4741-b649-85a324bb3fd4", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.datashare/accounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "dbformariadb-servers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/de5d5895-642e-4d19-a14e-08a67b2dd152", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dbformariadb/servers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "dbformysql-flexibleservers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/95f9d29c-defd-4387-b73b-5cdb4a982bf0", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dbformysql/flexibleservers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "dbformysql-servers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/605dd1c9-db6f-496f-ba7f-841ea3e246e0", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dbformysql/servers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "dbforpostgresql-flexibleservers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/499b7900-f44e-40ea-b8d3-2f3cf75f2ca4", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dbforpostgresql/flexibleservers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "dbforpostgresql-servergroupsv2", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a972fe34-7882-4476-87cf-eb9631785fb5", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dbforpostgresql/servergroupsv2'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "dbforpostgresql-servers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/69d4fcec-8426-426a-ad48-439fd3b14e9e", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dbforpostgresql/servers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "desktopvirtualization-applicationgroups", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6af023b1-4841-4b54-8f3d-69caa4e558cb", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.desktopvirtualization/applicationgroups'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "desktopvirtualization-hostpools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f55ffc18-72c5-479c-a998-dc6806a6fa89", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.desktopvirtualization/hostpools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "desktopvirtualization-scalingplans", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e9e99d63-621a-4a33-8799-0fb53e43f162", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.desktopvirtualization/scalingplans'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "desktopvirtualization-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e6acdfc4-25e3-4b36-9b0c-5c5743edd1b7", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.desktopvirtualization/workspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "devcenter-devcenters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a474a6be-35da-4c8a-ae97-f97d03bbd213", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.devcenter/devcenters'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "devices-iothubs", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/94d707a8-ce27-4851-9ce2-07dfe96a095b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.devices/iothubs'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "devices-provisioningservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3534c358-8a1c-4601-b6ff-43d378d65efa", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.devices/provisioningservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "digitaltwins-digitaltwinsinstances", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1d98c506-1460-4424-9006-84210fa5214a", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.digitaltwins/digitaltwinsinstances'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "documentdb-cassandraclusters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0bb5a1fb-b1ad-45fd-880e-a590f2ec8d1c", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.documentdb/cassandraclusters'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "documentdb-databaseaccounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0fcf2d91-8951-43be-9505-ab43dee2f580", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.documentdb/databaseaccounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "documentdb-mongoclusters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/10e8c93c-658d-47e8-aa6f-ed60f329c060", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.documentdb/mongoclusters'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "eventgrid-domains", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/03a087c0-b49f-4440-9ae5-013703eccc8c", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/domains'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "eventgrid-partnernamespaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f873a711-0322-4744-8322-7e62950fbec2", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/partnernamespaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "eventgrid-partnertopics", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5edd2580-3272-4509-b121-57054b4c70c4", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/partnertopics'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "eventgrid-systemtopics", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/22c8a30b-c5c1-4434-b837-2772543d3c3c", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/systemtopics'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "eventgrid-topics", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fcfe6bfa-dd36-40ef-ab2b-ed46f7d4abdb", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/topics'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "eventhub-namespaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e20f31d7-6b6d-4644-962a-ae513a85ab0b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventhub/namespaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "experimentation-experimentworkspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bb7bbee6-718c-4a71-a474-9f9f0e2a55e4", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.experimentation/experimentworkspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "healthcareapis-services", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5e23caa9-3cea-4f5b-a181-ba6a3bdb91ef", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.healthcareapis/services'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "healthcareapis-workspaces-dicomservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3ce7ba9e-058f-4ce9-b4d6-22e6c1238904", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.healthcareapis/workspaces/dicomservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "healthcareapis-workspaces-fhirservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1888f765-327a-4a8d-9816-968b34ea8b78", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.healthcareapis/workspaces/fhirservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "healthcareapis-workspaces-iotconnectors", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5798b390-1b02-47b7-88fb-90adf07e8d1b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.healthcareapis/workspaces/iotconnectors'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "insights-autoscalesettings", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7806c8b4-afc9-4a35-b9a9-3707413df35e", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.insights/autoscalesettings'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "insights-components", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/140ad507-70f0-43cb-a7cb-a8964341aefa", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.insights/components'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "insights-datacollectionrules", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/824142d3-eccb-4b7c-8403-319610811237", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.insights/datacollectionrules'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "keyvault-managedhsms", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5a6186f9-04a4-4320-b6ed-a1c3f2ebbc3b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.keyvault/managedhsms'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "keyvault-vaults", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/edf35972-ed56-4c2f-a4a1-65f0471ba702", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.keyvault/vaults'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "kusto-clusters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2137dd9f-94ac-413f-93a8-d068966308c9", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.kusto/clusters'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "loadtestservice-loadtests", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1c5187ed-9863-4961-bb92-c72bc3883e24", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.loadtestservice/loadtests'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "logic-integrationaccounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8464ded4-af15-4319-950f-a30400d35247", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.logic/integrationaccounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "logic-workflows", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f9431f54-4c78-47ef-aac9-2b37cbaeae75", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.logic/workflows'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "machinelearningservices-registries", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/84d8a69f-788a-4025-ba96-f36406cc9ee5", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.machinelearningservices/registries'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "machinelearningservices-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a8de4d0a-d637-4684-b70e-6df73b74d117", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.machinelearningservices/workspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "machinelearningservices-workspaces-onlineendpoints", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/315c965f-c0d7-4397-86d3-c05a0981437a", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.machinelearningservices/workspaces/onlineendpoints'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "managednetworkfabric-networkdevices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a511ca63-0a10-46e3-960b-bb6431e9e1a3", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.managednetworkfabric/networkdevices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "media-mediaservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0925a080-ab8d-44a1-a39c-61e184b4d8f9", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/mediaservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "media-videoanalyzers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f08edf17-5de2-4966-8c62-a50a3f4368ff", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/videoanalyzers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "media-mediaservices-liveevents", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/17f18067-406f-49b2-84ce-d1eb66c3fc75", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/mediaservices/liveevents'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "media-mediaservices-streamingendpoints", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f48e8ce0-91bd-4d51-8aba-8990d942f999", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/mediaservices/streamingendpoints'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "netapp-netappaccounts-capacitypools-volumes", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/20f21bc7-b0b8-4d57-83df-5a8a0912b934", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.netapp/netappaccounts/capacitypools/volumes'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-applicationgateways", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/887d1795-3d3d-4859-9ef4-9447392db2ea", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/applicationgateways'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-azurefirewalls", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/50bdafe5-c7b6-4812-af5f-75dc00561aed", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/azurefirewalls'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-bastionhosts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/be9259e2-a221-4411-84fd-dd22c6691653", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/bastionhosts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-dnsresolverpolicies", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b79bf56e-c296-4829-afea-6ac9263e7687", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/dnsresolverpolicies'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-expressroutecircuits", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2cb215be-a09b-4623-ac2f-dfc5012b1a5b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/expressroutecircuits'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-frontdoors", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d147ba9f-3e17-40b1-9c23-3bca478ba804", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/frontdoors'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-loadbalancers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3ca36b5c-2f29-41a0-9b1d-80e2cdf2d947", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/loadbalancers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-networkmanagers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/82333640-495e-4249-92bb-2a5e2d07b964", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/networkmanagers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-networkmanagers-ipampools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/28e2d787-b5f4-43cf-8cb7-11b54773d379", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/networkmanagers/ipampools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-networksecuritygroups", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0120ef84-66e7-4faf-aad8-14c36389697e", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/networksecuritygroups'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-networksecurityperimeters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/83089e56-9675-4bc8-ae7d-ca4547dc764b", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/networksecurityperimeters'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-p2svpngateways", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/00ec9865-beb6-4cfd-82ed-bd8f50756acd", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/p2svpngateways'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-publicipaddresses", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/39aa567d-69c2-4cc0-aaa9-76c6d4006b14", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/publicipaddresses'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-publicipprefixes", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a2361fd4-721d-4be2-9910-53be250b99ad", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/publicipprefixes'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-trafficmanagerprofiles", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/14681907-c749-4d60-8eae-1038537fb8a3", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/trafficmanagerprofiles'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-virtualnetworkgateways", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b4a9c220-1d62-4163-a17b-30db7d5b7278", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/virtualnetworkgateways'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-virtualnetworks", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8d0e693f-1b54-41d1-880e-199c3caed23f", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/virtualnetworks'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-vpngateways", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e0f5ec01-8979-49bf-9fd7-2a4eff9fa8e0", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/vpngateways'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "networkanalytics-dataproducts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/aa78af66-1659-40aa-90b0-b35b616adbdc", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.networkanalytics/dataproducts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "networkcloud-baremetalmachines", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e6421995-539a-4ce3-854b-1c88534396cf", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.networkcloud/baremetalmachines'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "networkcloud-clusters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b9d3f759-4cda-43cf-8f64-5b01aeb1c21a", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.networkcloud/clusters'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "networkcloud-storageappliances", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/005380e0-1f5b-467a-8ae8-8519938627f9", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.networkcloud/storageappliances'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "networkfunction-azuretrafficcollectors", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/50d96640-65c9-42de-b79a-95c1890c6ec8", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.networkfunction/azuretrafficcollectors'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "notificationhubs-namespaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0983eb33-77d7-47e5-9fa7-879f8cea012e", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.notificationhubs/namespaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "notificationhubs-namespaces-notificationhubs", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ebd6e41f-c33e-4e16-9249-cee4c68e6e8c", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.notificationhubs/namespaces/notificationhubs'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "openenergyplatform-energyservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3c25d50c-bd5a-4f98-a0de-2495e000cfa7", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.openenergyplatform/energyservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "operationalinsights-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fe85de62-a656-4b79-9d94-d95c89319bd9", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.operationalinsights/workspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "powerbi-tenants-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/819c6fd1-432a-4516-a9cb-0c4462af610f", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.powerbi/tenants/workspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "powerbidedicated-capacities", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/116caf13-2666-4a2e-afca-9a5f1e671b11", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.powerbidedicated/capacities'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "purview-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fc66c506-9397-485e-9451-acc1525f0070", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.purview/accounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "recoveryservices-vaults", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b678d84d-9723-4df0-a131-82c730231f1e", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.recoveryservices/vaults'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "relay-namespaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2853b2ac-3ce0-4e51-a1e3-086591e7028a", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.relay/namespaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "search-searchservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/480ee186-7504-48ac-b64e-af38673aa2c6", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.search/searchservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "servicebus-namespaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3dd58519-427e-42a4-8ffc-e415a3c716f1", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.servicebus/namespaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "servicenetworking-trafficcontrollers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/116b1633-30d0-4e9a-a665-8aea3dc906c6", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.servicenetworking/trafficcontrollers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "signalrservice-signalr", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0e0c742d-5031-4e65-bf96-1bee7cf55740", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.signalrservice/signalr'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "signalrservice-webpubsub", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bf6af3d2-fbd5-458f-8a40-2556cf539b45", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.signalrservice/webpubsub'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "sql-managedinstances", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/40654dcd-0b26-49d6-aeaf-d12d7c1e8c4d", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.sql/managedinstances'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "sql-managedinstances-databases", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bd0965d6-9544-406a-90b5-dc2d566670b8", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.sql/managedinstances/databases'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "sql-servers-databases", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8656d368-0643-4374-a63f-ae0ed4da1d9a", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.sql/servers/databases'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "storagecache-caches", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b14e31e2-22d0-48bb-907e-cfb3487e2120", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.storagecache/caches'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "storagemover-storagemovers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/efa9bf93-28f9-4f05-8e8c-31b8875e9713", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.storagemover/storagemovers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "streamanalytics-streamingjobs", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9529ceaf-8c7e-4149-bcb6-f38f63c5e4bd", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.streamanalytics/streamingjobs'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/96abcdc6-3c5a-4b0f-b031-9a4c1f36c9a6", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces-bigdatapools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a6d488fc-3520-4ec8-9cf6-c5e78d677651", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces/bigdatapools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces-kustopools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5a1fa110-16bc-49d0-a045-29a552b67cef", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces/kustopools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces-scopepools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9dbcaaa7-0c1b-4861-81c2-d340661b4382", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces/scopepools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces-sqlpools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f7407db8-e40d-4efd-9fff-c61298e01fd5", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces/sqlpools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "timeseriesinsights-environments", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/20017523-2fd1-49a8-a766-79cbc572b827", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.timeseriesinsights/environments'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "timeseriesinsights-environments-eventsources", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8963c37c-1113-4f1b-ae2e-3a5dd960a7f1", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.timeseriesinsights/environments/eventsources'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "videoindexer-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2f6556cb-a2da-4130-a0dd-e5d05dccf9bb", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.videoindexer/accounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "web-hostingenvironments", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bfc6b185-2af1-4998-a32e-c0144792eeb2", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.web/hostingenvironments'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "workloads-sapvirtualinstances", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5164fdc7-cfcd-4bd8-a3e9-f4be93166cde", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.workloads/sapvirtualinstances'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "allLogs" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + } + ], + "versions": [ + "1.0.0" + ] + }, + "name": "b6b86da9-e527-49de-ac59-6af0a9db10b8", + "id": "/providers/Microsoft.Authorization/policySetDefinitions/b6b86da9-e527-49de-ac59-6af0a9db10b8" +} \ No newline at end of file diff --git a/built-in-policies/policySetDefinitions/Monitoring/AzureMonitor_DiagSettings_storage_audit.json b/built-in-policies/policySetDefinitions/Monitoring/AzureMonitor_DiagSettings_storage_audit.json index 9dddee8c0..3d27f648e 100644 --- a/built-in-policies/policySetDefinitions/Monitoring/AzureMonitor_DiagSettings_storage_audit.json +++ b/built-in-policies/policySetDefinitions/Monitoring/AzureMonitor_DiagSettings_storage_audit.json @@ -1,14 +1,12 @@ { - "name": "8d723fb6-6680-45be-9d37-b1a4adb52207", - "id": "/providers/Microsoft.Authorization/policySetDefinitions/8d723fb6-6680-45be-9d37-b1a4adb52207", "properties": { "displayName": "Enable audit category group resource logging for supported resources to storage", "description": "Resource logs should be enabled to track activities and events that take place on your resources and give you visibility and insights into any changes that occur. This initiative deploys diagnostic setting using the audit category group to route logs to storage for all supported resources.", "policyType": "BuiltIn", - "version": "1.0.0", + "version": "1.1.0", "metadata": { "category": "Monitoring", - "version": "1.0.0" + "version": "1.1.0" }, "parameters": { "effect": { @@ -55,78 +53,172 @@ "description": "List of Resource Types to be evaluated for diagnostic setting existence." }, "allowedValues": [ + "microsoft.aad/domainservices", "microsoft.agfoodplatform/farmbeats", "microsoft.apimanagement/service", + "microsoft.app/managedenvironments", "microsoft.appconfiguration/configurationstores", "microsoft.attestation/attestationproviders", "microsoft.automation/automationaccounts", "microsoft.avs/privateclouds", + "microsoft.azureplaywrightservice/accounts", + "microsoft.azuresphere/catalogs", + "microsoft.batch/batchaccounts", "microsoft.cache/redis", + "microsoft.cache/redisenterprise/databases", "microsoft.cdn/profiles", + "microsoft.chaos/experiments", + "microsoft.codesigning/codesigningaccounts", "microsoft.cognitiveservices/accounts", + "microsoft.community/communitytrainings", + "microsoft.confidentialledger/managedccfs", "microsoft.containerregistry/registries", + "microsoft.dashboard/grafana", + "microsoft.dbformysql/flexibleservers", + "microsoft.dbforpostgresql/flexibleservers", + "microsoft.devcenter/devcenters", "microsoft.devices/iothubs", - "microsoft.eventgrid/topics", + "microsoft.documentdb/cassandraclusters", + "microsoft.documentdb/databaseaccounts", + "microsoft.documentdb/mongoclusters", "microsoft.eventgrid/domains", "microsoft.eventgrid/partnernamespaces", + "microsoft.eventgrid/topics", "microsoft.eventhub/namespaces", - "microsoft.keyvault/vaults", "microsoft.keyvault/managedhsms", + "microsoft.keyvault/vaults", + "microsoft.kusto/clusters", + "microsoft.loadtestservice/loadtests", + "microsoft.machinelearningservices/registries", "microsoft.machinelearningservices/workspaces", "microsoft.media/mediaservices", "microsoft.media/videoanalyzers", + "microsoft.media/mediaservices/liveevents", + "microsoft.media/mediaservices/streamingendpoints", "microsoft.netapp/netappaccounts/capacitypools/volumes", + "microsoft.network/bastionhosts", + "microsoft.network/frontdoors", + "microsoft.network/networkmanagers", + "microsoft.network/networkmanagers/ipampools", + "microsoft.network/p2svpngateways", "microsoft.network/publicipaddresses", + "microsoft.network/publicipprefixes", "microsoft.network/virtualnetworkgateways", - "microsoft.network/p2svpngateways", - "microsoft.network/frontdoors", - "microsoft.network/bastionhosts", + "microsoft.networkanalytics/dataproducts", + "microsoft.notificationhubs/namespaces", + "microsoft.notificationhubs/namespaces/notificationhubs", "microsoft.operationalinsights/workspaces", "microsoft.purview/accounts", + "microsoft.search/searchservices", "microsoft.servicebus/namespaces", "microsoft.signalrservice/signalr", "microsoft.signalrservice/webpubsub", + "microsoft.sql/managedinstances", "microsoft.sql/servers/databases", - "microsoft.sql/managedinstances" + "microsoft.synapse/workspaces", + "microsoft.synapse/workspaces/bigdatapools", + "microsoft.synapse/workspaces/kustopools", + "microsoft.synapse/workspaces/scopepools", + "microsoft.synapse/workspaces/sqlpools", + "microsoft.web/hostingenvironments", + "microsoft.workloads/sapvirtualinstances" ], "defaultValue": [ + "microsoft.aad/domainservices", "microsoft.agfoodplatform/farmbeats", "microsoft.apimanagement/service", + "microsoft.app/managedenvironments", "microsoft.appconfiguration/configurationstores", "microsoft.attestation/attestationproviders", "microsoft.automation/automationaccounts", "microsoft.avs/privateclouds", + "microsoft.azureplaywrightservice/accounts", + "microsoft.azuresphere/catalogs", + "microsoft.batch/batchaccounts", "microsoft.cache/redis", + "microsoft.cache/redisenterprise/databases", "microsoft.cdn/profiles", + "microsoft.chaos/experiments", + "microsoft.codesigning/codesigningaccounts", "microsoft.cognitiveservices/accounts", + "microsoft.community/communitytrainings", + "microsoft.confidentialledger/managedccfs", "microsoft.containerregistry/registries", + "microsoft.dashboard/grafana", + "microsoft.dbformysql/flexibleservers", + "microsoft.dbforpostgresql/flexibleservers", + "microsoft.devcenter/devcenters", "microsoft.devices/iothubs", - "microsoft.eventgrid/topics", + "microsoft.documentdb/cassandraclusters", + "microsoft.documentdb/databaseaccounts", + "microsoft.documentdb/mongoclusters", "microsoft.eventgrid/domains", "microsoft.eventgrid/partnernamespaces", + "microsoft.eventgrid/topics", "microsoft.eventhub/namespaces", - "microsoft.keyvault/vaults", "microsoft.keyvault/managedhsms", + "microsoft.keyvault/vaults", + "microsoft.kusto/clusters", + "microsoft.loadtestservice/loadtests", + "microsoft.machinelearningservices/registries", "microsoft.machinelearningservices/workspaces", "microsoft.media/mediaservices", "microsoft.media/videoanalyzers", + "microsoft.media/mediaservices/liveevents", + "microsoft.media/mediaservices/streamingendpoints", "microsoft.netapp/netappaccounts/capacitypools/volumes", + "microsoft.network/bastionhosts", + "microsoft.network/frontdoors", + "microsoft.network/networkmanagers", + "microsoft.network/networkmanagers/ipampools", + "microsoft.network/p2svpngateways", "microsoft.network/publicipaddresses", + "microsoft.network/publicipprefixes", "microsoft.network/virtualnetworkgateways", - "microsoft.network/p2svpngateways", - "microsoft.network/frontdoors", - "microsoft.network/bastionhosts", + "microsoft.networkanalytics/dataproducts", + "microsoft.notificationhubs/namespaces", + "microsoft.notificationhubs/namespaces/notificationhubs", "microsoft.operationalinsights/workspaces", "microsoft.purview/accounts", + "microsoft.search/searchservices", "microsoft.servicebus/namespaces", "microsoft.signalrservice/signalr", "microsoft.signalrservice/webpubsub", + "microsoft.sql/managedinstances", "microsoft.sql/servers/databases", - "microsoft.sql/managedinstances" + "microsoft.synapse/workspaces", + "microsoft.synapse/workspaces/bigdatapools", + "microsoft.synapse/workspaces/kustopools", + "microsoft.synapse/workspaces/scopepools", + "microsoft.synapse/workspaces/sqlpools", + "microsoft.web/hostingenvironments", + "microsoft.workloads/sapvirtualinstances" ] } }, "policyDefinitions": [ + { + "policyDefinitionReferenceId": "aad-domainservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9c79e60b-99f2-49f3-b08c-630d269bddc1", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.aad/domainservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, { "policyDefinitionReferenceId": "agfoodplatform-farmbeats", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0f708273-cf83-4d29-b31b-ebaf8d0eb8c2", @@ -171,6 +263,28 @@ } } }, + { + "policyDefinitionReferenceId": "app-managedenvironments", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a26c842f-bee7-4a1f-9ae1-a973d3a0075a", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.app/managedenvironments'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, { "policyDefinitionReferenceId": "appconfiguration-configurationstores", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2e8a8853-917a-4d26-9c3a-c92a7fa031e8", @@ -259,6 +373,72 @@ } } }, + { + "policyDefinitionReferenceId": "azureplaywrightservice-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2e3285f9-ae82-4f69-b83f-5b6f1ee69f3a", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.azureplaywrightservice/accounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "azuresphere-catalogs", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9b6f89db-876b-4156-9f9b-f29dcf302ad2", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.azuresphere/catalogs'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "batch-batchaccounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/40f0d036-d73d-45a9-8c3d-f3f84d227193", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.batch/batchaccounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, { "policyDefinitionReferenceId": "cache-redis", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d3e11828-02c8-40d2-a518-ad01508bb4d7", @@ -281,6 +461,28 @@ } } }, + { + "policyDefinitionReferenceId": "cache-redisenterprise-databases", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e76ef589-c7d6-42cf-a61a-13471f6f50cd", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cache/redisenterprise/databases'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, { "policyDefinitionReferenceId": "cdn-profiles", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9f4e810a-899e-4e5e-8174-abfcf15739a3", @@ -304,12 +506,12 @@ } }, { - "policyDefinitionReferenceId": "cognitiveservices-accounts", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/14e81583-c89c-47db-af0d-f9ddddcccd9f", + "policyDefinitionReferenceId": "chaos-experiments", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1cd30d13-d34c-4cb8-8f9d-4692f7d40d97", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cognitiveservices/accounts'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.chaos/experiments'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -326,12 +528,12 @@ } }, { - "policyDefinitionReferenceId": "containerregistry-registries", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/106cd3bd-50a1-466c-869f-f9c2d310477b", + "policyDefinitionReferenceId": "codesigning-codesigningaccounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/42e5ad1f-57fd-49a7-b0e4-c7a7ae25ba3d", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.containerregistry/registries'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.codesigning/codesigningaccounts'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -348,12 +550,12 @@ } }, { - "policyDefinitionReferenceId": "devices-iothubs", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/94d707a8-ce27-4851-9ce2-07dfe96a095b", + "policyDefinitionReferenceId": "cognitiveservices-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/14e81583-c89c-47db-af0d-f9ddddcccd9f", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.devices/iothubs'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.cognitiveservices/accounts'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -370,12 +572,12 @@ } }, { - "policyDefinitionReferenceId": "eventgrid-topics", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fcfe6bfa-dd36-40ef-ab2b-ed46f7d4abdb", + "policyDefinitionReferenceId": "community-communitytrainings", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2eb903dd-4881-4284-a31d-4bae3f053946", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/topics'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.community/communitytrainings'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -392,12 +594,12 @@ } }, { - "policyDefinitionReferenceId": "eventgrid-domains", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/03a087c0-b49f-4440-9ae5-013703eccc8c", + "policyDefinitionReferenceId": "confidentialledger-managedccfs", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0eb11858-8d9f-4525-b9ab-cc5eab07d27a", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/domains'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.confidentialledger/managedccfs'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -414,12 +616,12 @@ } }, { - "policyDefinitionReferenceId": "eventgrid-partnernamespaces", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f873a711-0322-4744-8322-7e62950fbec2", + "policyDefinitionReferenceId": "containerregistry-registries", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/106cd3bd-50a1-466c-869f-f9c2d310477b", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/partnernamespaces'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.containerregistry/registries'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -436,12 +638,12 @@ } }, { - "policyDefinitionReferenceId": "eventhub-namespaces", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e20f31d7-6b6d-4644-962a-ae513a85ab0b", + "policyDefinitionReferenceId": "dashboard-grafana", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a78631da-8506-4113-96f4-2805de193083", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventhub/namespaces'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dashboard/grafana'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -458,12 +660,12 @@ } }, { - "policyDefinitionReferenceId": "keyvault-vaults", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/edf35972-ed56-4c2f-a4a1-65f0471ba702", + "policyDefinitionReferenceId": "dbformysql-flexibleservers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/95f9d29c-defd-4387-b73b-5cdb4a982bf0", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.keyvault/vaults'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dbformysql/flexibleservers'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -480,12 +682,12 @@ } }, { - "policyDefinitionReferenceId": "keyvault-managedhsms", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5a6186f9-04a4-4320-b6ed-a1c3f2ebbc3b", + "policyDefinitionReferenceId": "dbforpostgresql-flexibleservers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/499b7900-f44e-40ea-b8d3-2f3cf75f2ca4", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.keyvault/managedhsms'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.dbforpostgresql/flexibleservers'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -502,12 +704,12 @@ } }, { - "policyDefinitionReferenceId": "machinelearningservices-workspaces", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a8de4d0a-d637-4684-b70e-6df73b74d117", + "policyDefinitionReferenceId": "devcenter-devcenters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a474a6be-35da-4c8a-ae97-f97d03bbd213", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.machinelearningservices/workspaces'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.devcenter/devcenters'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -524,12 +726,12 @@ } }, { - "policyDefinitionReferenceId": "media-mediaservices", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0925a080-ab8d-44a1-a39c-61e184b4d8f9", + "policyDefinitionReferenceId": "devices-iothubs", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/94d707a8-ce27-4851-9ce2-07dfe96a095b", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/mediaservices'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.devices/iothubs'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -546,12 +748,12 @@ } }, { - "policyDefinitionReferenceId": "media-videoanalyzers", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f08edf17-5de2-4966-8c62-a50a3f4368ff", + "policyDefinitionReferenceId": "documentdb-cassandraclusters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0bb5a1fb-b1ad-45fd-880e-a590f2ec8d1c", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/videoanalyzers'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.documentdb/cassandraclusters'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -568,12 +770,12 @@ } }, { - "policyDefinitionReferenceId": "netapp-netappaccounts-capacitypools-volumes", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/20f21bc7-b0b8-4d57-83df-5a8a0912b934", + "policyDefinitionReferenceId": "documentdb-databaseaccounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0fcf2d91-8951-43be-9505-ab43dee2f580", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.netapp/netappaccounts/capacitypools/volumes'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.documentdb/databaseaccounts'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -590,12 +792,12 @@ } }, { - "policyDefinitionReferenceId": "network-publicipaddresses", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/39aa567d-69c2-4cc0-aaa9-76c6d4006b14", + "policyDefinitionReferenceId": "documentdb-mongoclusters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/10e8c93c-658d-47e8-aa6f-ed60f329c060", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/publicipaddresses'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.documentdb/mongoclusters'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -612,12 +814,12 @@ } }, { - "policyDefinitionReferenceId": "network-virtualnetworkgateways", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b4a9c220-1d62-4163-a17b-30db7d5b7278", + "policyDefinitionReferenceId": "eventgrid-domains", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/03a087c0-b49f-4440-9ae5-013703eccc8c", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/virtualnetworkgateways'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/domains'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -634,12 +836,12 @@ } }, { - "policyDefinitionReferenceId": "network-p2svpngateways", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/00ec9865-beb6-4cfd-82ed-bd8f50756acd", + "policyDefinitionReferenceId": "eventgrid-partnernamespaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f873a711-0322-4744-8322-7e62950fbec2", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/p2svpngateways'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/partnernamespaces'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -656,12 +858,12 @@ } }, { - "policyDefinitionReferenceId": "network-frontdoors", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d147ba9f-3e17-40b1-9c23-3bca478ba804", + "policyDefinitionReferenceId": "eventgrid-topics", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fcfe6bfa-dd36-40ef-ab2b-ed46f7d4abdb", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/frontdoors'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventgrid/topics'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -678,12 +880,12 @@ } }, { - "policyDefinitionReferenceId": "network-bastionhosts", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/be9259e2-a221-4411-84fd-dd22c6691653", + "policyDefinitionReferenceId": "eventhub-namespaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e20f31d7-6b6d-4644-962a-ae513a85ab0b", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/bastionhosts'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.eventhub/namespaces'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -700,12 +902,12 @@ } }, { - "policyDefinitionReferenceId": "operationalinsights-workspaces", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fe85de62-a656-4b79-9d94-d95c89319bd9", + "policyDefinitionReferenceId": "keyvault-managedhsms", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5a6186f9-04a4-4320-b6ed-a1c3f2ebbc3b", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.operationalinsights/workspaces'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.keyvault/managedhsms'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -722,12 +924,12 @@ } }, { - "policyDefinitionReferenceId": "purview-accounts", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fc66c506-9397-485e-9451-acc1525f0070", + "policyDefinitionReferenceId": "keyvault-vaults", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/edf35972-ed56-4c2f-a4a1-65f0471ba702", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.purview/accounts'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.keyvault/vaults'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -744,12 +946,12 @@ } }, { - "policyDefinitionReferenceId": "servicebus-namespaces", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3dd58519-427e-42a4-8ffc-e415a3c716f1", + "policyDefinitionReferenceId": "kusto-clusters", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2137dd9f-94ac-413f-93a8-d068966308c9", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.servicebus/namespaces'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.kusto/clusters'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -766,12 +968,12 @@ } }, { - "policyDefinitionReferenceId": "signalrservice-signalr", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0e0c742d-5031-4e65-bf96-1bee7cf55740", + "policyDefinitionReferenceId": "loadtestservice-loadtests", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1c5187ed-9863-4961-bb92-c72bc3883e24", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.signalrservice/signalr'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.loadtestservice/loadtests'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -788,12 +990,12 @@ } }, { - "policyDefinitionReferenceId": "signalrservice-webpubsub", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bf6af3d2-fbd5-458f-8a40-2556cf539b45", + "policyDefinitionReferenceId": "machinelearningservices-registries", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/84d8a69f-788a-4025-ba96-f36406cc9ee5", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.signalrservice/webpubsub'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.machinelearningservices/registries'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -810,12 +1012,12 @@ } }, { - "policyDefinitionReferenceId": "sql-servers-databases", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8656d368-0643-4374-a63f-ae0ed4da1d9a", + "policyDefinitionReferenceId": "machinelearningservices-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a8de4d0a-d637-4684-b70e-6df73b74d117", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.sql/servers/databases'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.machinelearningservices/workspaces'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -832,12 +1034,12 @@ } }, { - "policyDefinitionReferenceId": "sql-managedinstances", - "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/40654dcd-0b26-49d6-aeaf-d12d7c1e8c4d", + "policyDefinitionReferenceId": "media-mediaservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0925a080-ab8d-44a1-a39c-61e184b4d8f9", "definitionVersion": "1.*.*", "parameters": { "effect": { - "value": "[if(contains(parameters('resourceTypeList'),'microsoft.sql/managedinstances'),parameters('effect'),'Disabled')]" + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/mediaservices'),parameters('effect'),'Disabled')]" }, "diagnosticSettingName": { "value": "[parameters('diagnosticSettingName')]" @@ -852,10 +1054,673 @@ "value": "[parameters('storageAccount')]" } } - } - ], - "versions": [ - "1.0.0" - ] - } + }, + { + "policyDefinitionReferenceId": "media-videoanalyzers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f08edf17-5de2-4966-8c62-a50a3f4368ff", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/videoanalyzers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "media-mediaservices-liveevents", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/17f18067-406f-49b2-84ce-d1eb66c3fc75", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/mediaservices/liveevents'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "media-mediaservices-streamingendpoints", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f48e8ce0-91bd-4d51-8aba-8990d942f999", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.media/mediaservices/streamingendpoints'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "netapp-netappaccounts-capacitypools-volumes", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/20f21bc7-b0b8-4d57-83df-5a8a0912b934", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.netapp/netappaccounts/capacitypools/volumes'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-bastionhosts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/be9259e2-a221-4411-84fd-dd22c6691653", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/bastionhosts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-frontdoors", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d147ba9f-3e17-40b1-9c23-3bca478ba804", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/frontdoors'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-networkmanagers", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/82333640-495e-4249-92bb-2a5e2d07b964", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/networkmanagers'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-networkmanagers-ipampools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/28e2d787-b5f4-43cf-8cb7-11b54773d379", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/networkmanagers/ipampools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-p2svpngateways", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/00ec9865-beb6-4cfd-82ed-bd8f50756acd", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/p2svpngateways'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-publicipaddresses", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/39aa567d-69c2-4cc0-aaa9-76c6d4006b14", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/publicipaddresses'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-publicipprefixes", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a2361fd4-721d-4be2-9910-53be250b99ad", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/publicipprefixes'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "network-virtualnetworkgateways", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b4a9c220-1d62-4163-a17b-30db7d5b7278", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.network/virtualnetworkgateways'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "networkanalytics-dataproducts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/aa78af66-1659-40aa-90b0-b35b616adbdc", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.networkanalytics/dataproducts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "notificationhubs-namespaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0983eb33-77d7-47e5-9fa7-879f8cea012e", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.notificationhubs/namespaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "notificationhubs-namespaces-notificationhubs", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ebd6e41f-c33e-4e16-9249-cee4c68e6e8c", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.notificationhubs/namespaces/notificationhubs'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "operationalinsights-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fe85de62-a656-4b79-9d94-d95c89319bd9", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.operationalinsights/workspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "purview-accounts", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fc66c506-9397-485e-9451-acc1525f0070", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.purview/accounts'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "search-searchservices", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/480ee186-7504-48ac-b64e-af38673aa2c6", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.search/searchservices'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "servicebus-namespaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3dd58519-427e-42a4-8ffc-e415a3c716f1", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.servicebus/namespaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "signalrservice-signalr", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0e0c742d-5031-4e65-bf96-1bee7cf55740", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.signalrservice/signalr'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "signalrservice-webpubsub", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bf6af3d2-fbd5-458f-8a40-2556cf539b45", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.signalrservice/webpubsub'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "sql-managedinstances", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/40654dcd-0b26-49d6-aeaf-d12d7c1e8c4d", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.sql/managedinstances'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "sql-servers-databases", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8656d368-0643-4374-a63f-ae0ed4da1d9a", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.sql/servers/databases'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/96abcdc6-3c5a-4b0f-b031-9a4c1f36c9a6", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces-bigdatapools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a6d488fc-3520-4ec8-9cf6-c5e78d677651", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces/bigdatapools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces-kustopools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5a1fa110-16bc-49d0-a045-29a552b67cef", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces/kustopools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces-scopepools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9dbcaaa7-0c1b-4861-81c2-d340661b4382", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces/scopepools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "synapse-workspaces-sqlpools", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f7407db8-e40d-4efd-9fff-c61298e01fd5", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.synapse/workspaces/sqlpools'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "web-hostingenvironments", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bfc6b185-2af1-4998-a32e-c0144792eeb2", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.web/hostingenvironments'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + }, + { + "policyDefinitionReferenceId": "workloads-sapvirtualinstances", + "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5164fdc7-cfcd-4bd8-a3e9-f4be93166cde", + "definitionVersion": "1.*.*", + "parameters": { + "effect": { + "value": "[if(contains(parameters('resourceTypeList'),'microsoft.workloads/sapvirtualinstances'),parameters('effect'),'Disabled')]" + }, + "diagnosticSettingName": { + "value": "[parameters('diagnosticSettingName')]" + }, + "categoryGroup": { + "value": "audit" + }, + "resourceLocation": { + "value": "[parameters('resourceLocation')]" + }, + "storageAccount": { + "value": "[parameters('storageAccount')]" + } + } + } + ], + "versions": [ + "1.1.0", + "1.0.0" + ] + }, + "name": "8d723fb6-6680-45be-9d37-b1a4adb52207", + "id": "/providers/Microsoft.Authorization/policySetDefinitions/8d723fb6-6680-45be-9d37-b1a4adb52207" } \ No newline at end of file