LogProfile audit builtin policy needs updating to audit diagnostic setting
- Dominant language
- Open Policy Agent
- Stars
- 1.7k
- Forks
- 1.2k
- Avg merge
- 2d 54m
- Merged PRs (30d)
- 3
Description
#### Details of the scenario you tried and the problem that is occurring
The builtin policy Logprofile_activityLogs_Audit.json targets the Event Hub and Storage Account configuration for subscription level activity logging. This is unfortunately using a deprecated setting and needs to be updated to audit the Diagnostic setting for the subscription as its included in several Policy Inititatives used by customers who are saying its no longer relevant.
https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/Monitoring/Logprofile_activityLogs_Audit.json
In the doco its the Legacy Experience here:
https://docs.microsoft.com/en-us/azure/azure-monitor/essentials/activity-log#log-profiles
#### Verbose logs showing the problem
#### Suggested solution to the issue
[LogProfile-New.txt](https://github.com/Azure/azure-policy/files/6395895/LogProfile-New.txt)
I created a custom policy which I have uploaded as an example that audits that particular setting corectly. Please let me know if there is something further you need from me to assist.
#### If policy is Guest Configuration - details about target node
Not Guest configuration
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.