Azure / Azure/Azure-Landing-Zones
Add subplan support for Security Center resource types to adjust the pricing model
- Dominant language
- PowerShell
- Stars
- 96
- Forks
- 70
- Avg merge
- 3d 1h
- Merged PRs (30d)
- 7
Description
- Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request
- Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
- If you are interested in working on this issue or have submitted a pull request, please leave a comment
## Description
Some security center resource type like virtual machines or storage account can be customised with a subplan to adjust the pricing of that service.
As of today the following subplan are supported:
- Storage accounts ("PerStorageAccount")
- VirtualMachines ("P1" or "P2")
In the current implementation there is a boolean value to enable or disable the service.
```hcl
// Management resources
deploy_management_resources = true
configure_management_resources = {
advanced = null
location = ""
settings = {
log_analytics = {
# removed for clarity
}
security_center = {
config = {
email_security_contact = "email@domain.com"
enable_defender_for_app_services = true
enable_defender_for_arm = true
enable_defender_for_containers = true
enable_defender_for_dns = true
enable_defender_for_key_vault = true
enable_defender_for_oss_databases = true
enable_defender_for_servers = true
enable_defender_for_sql_server_vms = true
enable_defender_for_sql_servers = true
enable_defender_for_storage = true
}
enabled = true
}
}
tags = null
}
```
### Describe the solution you'd like
Customise the pricing at the platform landingzone level
Customise the pricing at the landingzone or sub-level
### Additional context
Contributor guide
Research direction
Start with the security_center configuration shown in the issue and review how its boolean resource settings are represented. Identify the supported Storage accounts and VirtualMachines subplan values, then verify that pricing can be customized at the platform landing zone and landing zone sub-levels.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure
- Domain
- cloud, infrastructure, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 30/100