Azure / Azure/azure-policy

LogProfile audit builtin policy needs updating to audit diagnostic setting

Open
#751 1 comment 0 reactions 1 assignee Claimed by @shanhix1 View on GitHub
Dominant language
Open Policy Agent
Stars
1.7k
Forks
1.2k
Avg merge
2d 54m
Merged PRs (30d)
3

Description

#### Details of the scenario you tried and the problem that is occurring
The builtin policy Logprofile_activityLogs_Audit.json targets the Event Hub and Storage Account configuration for subscription level activity logging. This is unfortunately using a deprecated setting and needs to be updated to audit the Diagnostic setting for the subscription as its included in several Policy Inititatives used by customers who are saying its no longer relevant.
https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/Monitoring/Logprofile_activityLogs_Audit.json

In the doco its the Legacy Experience here:
https://docs.microsoft.com/en-us/azure/azure-monitor/essentials/activity-log#log-profiles

#### Verbose logs showing the problem

#### Suggested solution to the issue
[LogProfile-New.txt](https://github.com/Azure/azure-policy/files/6395895/LogProfile-New.txt)
I created a custom policy which I have uploaded as an example that audits that particular setting corectly. Please let me know if there is something further you need from me to assist.

#### If policy is Guest Configuration - details about target node
Not Guest configuration

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.