Sandbox ESLZ
Subscription level deployment
Logging
-
Log Analytics workspace (req) --> Microsoft.OperationalInsights/workspaces - Bicep & ARM template reference | Microsoft Docs
-
Activity Logs (req)
-
--> Log Analytics Built-in Policy -->https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2F2465583e-4e78-4c15-b6be-a36cbc7c8b0f
-
Diagnostics Audits Logs (req)
-
--> Storage (req) Policy artifact?
Service Health
- Configure alert --> Receive activity log alerts on Azure service notifications using Bicep - Azure Service Health | Microsoft Docs
Network
- Virtual Network (Opt???) --> Create virtual network resources by using Bicep - Azure Resource Manager | Microsoft Docs
Security
- Azure Defender for Cloud (req)
- Turn on ASB
--> Configure Azure Security Center using Bicep | Erwin Staal
