Azure / Azure/Azure-Landing-Zones

Add subplan support for Security Center resource types to adjust the pricing model

Open
#536 4 comments 0 reactions 0 assignees View on GitHub
Transfer From: caf-enterprise-scale :arrow_right:
Dominant language
PowerShell
Stars
96
Forks
70
Avg merge
3d 1h
Merged PRs (30d)
7

Description

- Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request
- Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
- If you are interested in working on this issue or have submitted a pull request, please leave a comment

## Description
Some security center resource type like virtual machines or storage account can be customised with a subplan to adjust the pricing of that service.

As of today the following subplan are supported:

- Storage accounts ("PerStorageAccount")
- VirtualMachines ("P1" or "P2")

In the current implementation there is a boolean value to enable or disable the service.

```hcl
// Management resources
deploy_management_resources = true
configure_management_resources = {
advanced = null
location = ""
settings = {
log_analytics = {
# removed for clarity
}
security_center = {
config = {
email_security_contact = "email@domain.com"
enable_defender_for_app_services = true
enable_defender_for_arm = true
enable_defender_for_containers = true
enable_defender_for_dns = true
enable_defender_for_key_vault = true
enable_defender_for_oss_databases = true
enable_defender_for_servers = true
enable_defender_for_sql_server_vms = true
enable_defender_for_sql_servers = true
enable_defender_for_storage = true
}
enabled = true
}
}
tags = null
}
```

### Describe the solution you'd like

Customise the pricing at the platform landingzone level
Customise the pricing at the landingzone or sub-level

### Additional context

Contributor guide

Open the contributing guide

Research direction

Start with the security_center configuration shown in the issue and review how its boolean resource settings are represented. Identify the supported Storage accounts and VirtualMachines subplan values, then verify that pricing can be customized at the platform landing zone and landing zone sub-levels.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure
Domain
cloud, infrastructure, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.