Merge pull request #190 from janfaurskovgithub/prepforeslz

Prep for ESLZ move
Azure · Jul 7, 2023 · dbc298d · dbc298d
2 parents 9fd5b58 + 86c9d61
commit dbc298d
Show file tree

Hide file tree

Showing 73 changed files with 661 additions and 387 deletions.
diff --git a/src/resources/Microsoft.Authorization/policyDefinitions/deploy-aa_totaljob_alert.bicep b/src/resources/Microsoft.Authorization/policyDefinitions/deploy-aa_totaljob_alert.bicep
@@ -56,13 +56,16 @@ module TotalJobAlert '../../arm/Microsoft.Authorization/policyDefinitions/manage
     name: '${uniqueString(deployment().name)}-aatotaljob-policyDefinitions'
     params: {
         name: 'Deploy_AA_TotalJob_Alert'
-        displayName: '[DINE] Deploy Automation Account TotalJob Alert'
-        description: 'DINE policy to audit/deploy Automation Account TotalJob Alert'
+        displayName: 'Deploy Automation Account TotalJob Alert'
+         description: 'Policy to audit/deploy Automation Account TotalJob Alert'
         location: policyLocation
         metadata: {
             version: '1.0.1'
-            Category: 'Networking'
-            source: 'https://github.com/Azure/ALZ-Monitor/'
+            category: 'Automation'
+            source: 'https://github.com/Azure/Enterprise-Scale/' 
+            alzCloudEnvironments: [ 
+               'AzureCloud'
+              ]
             _deployed_by_alz_monitor: 'True'
         }
         parameters: {

diff --git a/...rces/Microsoft.Authorization/policyDefinitions/deploy-activitylog-AzureFirewall-Del.bicep b/...rces/Microsoft.Authorization/policyDefinitions/deploy-activitylog-AzureFirewall-Del.bicep
@@ -19,13 +19,16 @@ module ActivityLogFirewallDeleteAlert '../../arm/Microsoft.Authorization/policyD
     name: '${uniqueString(deployment().name)}-shi-policyDefinitions'
     params: {
         name: 'Deploy_activitylog_Firewall_Delete'
-        displayName: '[DINE] Deploy Activity Log Azure FireWall Delete Alert'
-        description: 'DINE policy to Deploy Activity Log Azure Firewall Delete Alert'
+        displayName: 'Deploy Activity Log Azure FireWall Delete Alert'
+         description: 'Policy to Deploy Activity Log Azure Firewall Delete Alert'
         location: policyLocation
         metadata: {
             version: '1.0.1'
-            Category: 'ActivityLog'
-            source: 'https://github.com/Azure/ALZ-Monitor/'
+            category: 'Network'
+            source: 'https://github.com/Azure/Enterprise-Scale/' 
+            alzCloudEnvironments: [ 
+               'AzureCloud'
+              ]
             _deployed_by_alz_monitor: 'True'
         }
         parameters: {

diff --git a/...resources/Microsoft.Authorization/policyDefinitions/deploy-activitylog-KeyVault-Del.bicep b/...resources/Microsoft.Authorization/policyDefinitions/deploy-activitylog-KeyVault-Del.bicep
@@ -20,13 +20,16 @@ module ActivityLogKeyVaultDeleteAlert '../../arm/Microsoft.Authorization/policyD
     name: '${uniqueString(deployment().name)}-shi-policyDefinitions'
     params: {
         name: 'Deploy_activitylog_KeyVault_Delete'
-        displayName: '[DINE] Deploy Activity Log Key Vault Delete Alert'
-        description: 'DINE policy to Deploy Activity Log Key Vault Delete Alert'
+        displayName: 'Deploy Activity Log Key Vault Delete Alert'
+         description: 'Policy to Deploy Activity Log Key Vault Delete Alert'
         location: policyLocation
         metadata: {
             version: '1.0.1'
-            Category: 'ActivityLog'
-            source: 'https://github.com/Azure/ALZ-Monitor/'
+            category: 'Key Vault'
+            source: 'https://github.com/Azure/Enterprise-Scale/' 
+            alzCloudEnvironments: [ 
+               'AzureCloud'
+              ]
             _deployed_by_alz_monitor: 'True'
         }
         parameters: {

diff --git a/...ources/Microsoft.Authorization/policyDefinitions/deploy-activitylog-LAWorkspace-Del.bicep b/...ources/Microsoft.Authorization/policyDefinitions/deploy-activitylog-LAWorkspace-Del.bicep
@@ -18,13 +18,16 @@ module ActivityLogLAWorkspaceDeleteAlert '../../arm/Microsoft.Authorization/poli
     name: '${uniqueString(deployment().name)}-shi-policyDefinitions'
     params: {
         name: 'Deploy_activitylog_LAWorkspace_Delete'
-        displayName: '[DINE] Deploy Activity Log LA Workspace Delete Alert'
-        description: 'DINE policy to Deploy Activity Log LA Workspace Delete Alert'
+        displayName: 'Deploy Activity Log LA Workspace Delete Alert'
+         description: 'Policy to Deploy Activity Log LA Workspace Delete Alert'
         location: policyLocation
         metadata: {
             version: '1.0.1'
-            Category: 'ActivityLog'
-            source: 'https://github.com/Azure/ALZ-Monitor/'
+            category: 'Monitoring'
+            source: 'https://github.com/Azure/Enterprise-Scale/' 
+            alzCloudEnvironments: [ 
+               'AzureCloud'
+              ]
             _deployed_by_alz_monitor: 'True'
         }
         parameters: {

diff --git a/...rces/Microsoft.Authorization/policyDefinitions/deploy-activitylog-LAWorkspace-ReGen.bicep b/...rces/Microsoft.Authorization/policyDefinitions/deploy-activitylog-LAWorkspace-ReGen.bicep
@@ -20,13 +20,16 @@ module ActivityLogLAWorkspaceGenKeyAlert '../../arm/Microsoft.Authorization/poli
     name: '${uniqueString(deployment().name)}-shi-policyDefinitions'
     params: {
         name: 'Deploy_activitylog_LAWorkspace_KeyRegen'
-        displayName: '[DINE] Deploy Activity Log LA Workspace Regenerate Key Alert'
-        description: 'DINE policy to Deploy Activity Log LA Workspace Regenerate Key Alert'
+        displayName: 'Deploy Activity Log LA Workspace Regenerate Key Alert'
+         description: 'Policy to Deploy Activity Log LA Workspace Regenerate Key Alert'
         location: policyLocation
         metadata: {
             version: '1.0.1'
-            Category: 'ActivityLog'
-            source: 'https://github.com/Azure/ALZ-Monitor/'
+            category: 'Monitoring'
+            source: 'https://github.com/Azure/Enterprise-Scale/' 
+            alzCloudEnvironments: [ 
+               'AzureCloud'
+              ]
             _deployed_by_alz_monitor: 'True'
         }
         parameters: {

diff --git a/src/resources/Microsoft.Authorization/policyDefinitions/deploy-activitylog-NSG-Del.bicep b/src/resources/Microsoft.Authorization/policyDefinitions/deploy-activitylog-NSG-Del.bicep
@@ -20,13 +20,16 @@ module ActivityLogNSGDeleteAlert '../../arm/Microsoft.Authorization/policyDefini
     name: '${uniqueString(deployment().name)}-shi-policyDefinitions'
     params: {
         name: 'Deploy_activitylog_NSG_Delete'
-        displayName: '[DINE] Deploy Activity Log NSG Delete Alert'
-        description: 'DINE policy to Deploy Activity Log NSG Delete Alert'
+        displayName: 'Deploy Activity Log NSG Delete Alert'
+         description: 'Policy to Deploy Activity Log NSG Delete Alert'
         location: policyLocation
         metadata: {
             version: '1.0.1'
-            Category: 'ActivityLog'
-            source: 'https://github.com/Azure/ALZ-Monitor/'
+            category: 'Network'
+            source: 'https://github.com/Azure/Enterprise-Scale/' 
+            alzCloudEnvironments: [ 
+               'AzureCloud'
+              ]
             _deployed_by_alz_monitor: 'True'
         }
         parameters: {

diff --git a/....Authorization/policyDefinitions/deploy-activitylog-ResourceHealth-UnHealthly-alert.bicep b/....Authorization/policyDefinitions/deploy-activitylog-ResourceHealth-UnHealthly-alert.bicep
@@ -19,13 +19,16 @@ module ResourceHealthUnhealthyAlert '../../arm/Microsoft.Authorization/policyDef
     name: '${uniqueString(deployment().name)}-shi-policyDefinitions'
     params: {
         name: 'Deploy_activitylog_ResourceHealth_Unhealthy_Alert'
-        displayName: '[DINE] Deploy Resource Health Unhealthy Alert'
-        description: 'DINE policy to Deploy Resource Health Unhealthy Alert'
+        displayName: 'Deploy Resource Health Unhealthy Alert'
+         description: 'Policy to Deploy Resource Health Unhealthy Alert'
         location: policyLocation
         metadata: {
             version: '1.0.1'
-            Category: 'ServiceHealth'
-            source: 'https://github.com/Azure/ALZ-Monitor/'
+            category: 'Monitoring'
+            source: 'https://github.com/Azure/Enterprise-Scale/' 
+            alzCloudEnvironments: [ 
+               'AzureCloud'
+              ]
             _deployed_by_alz_monitor: 'True'
         }
         parameters: {

diff --git a/...rces/Microsoft.Authorization/policyDefinitions/deploy-activitylog-RouteTable-Update.bicep b/...rces/Microsoft.Authorization/policyDefinitions/deploy-activitylog-RouteTable-Update.bicep
@@ -20,13 +20,16 @@ module ActivityLogUDRUpdateAlert '../../arm/Microsoft.Authorization/policyDefini
     name: '${uniqueString(deployment().name)}-shi-policyDefinitions'
     params: {
         name: 'Deploy_activitylog_RouteTable_Update'
-        displayName: '[DINE] Deploy Activity Log Route Table Update Alert'
-        description: 'DINE policy to Deploy Activity Log Route Table Update Alert'
+        displayName: 'Deploy Activity Log Route Table Update Alert'
+         description: 'Policy to Deploy Activity Log Route Table Update Alert'
         location: policyLocation
         metadata: {
             version: '1.0.1'
-            Category: 'ActivityLog'
-            source: 'https://github.com/Azure/ALZ-Monitor/'
+            category: 'Network'
+            source: 'https://github.com/Azure/Enterprise-Scale/' 
+            alzCloudEnvironments: [ 
+               'AzureCloud'
+              ]
             _deployed_by_alz_monitor: 'True'
         }
         parameters: {

diff --git a/...s/Microsoft.Authorization/policyDefinitions/deploy-activitylog-ServiceHealth-Health.bicep b/...s/Microsoft.Authorization/policyDefinitions/deploy-activitylog-ServiceHealth-Health.bicep
@@ -20,13 +20,16 @@ module ServiceHealthIncidentAlert '../../arm/Microsoft.Authorization/policyDefin
     name: '${uniqueString(deployment().name)}-shi-policyDefinitions'
     params: {
         name: 'Deploy_activitylog_ServiceHealth_HealthAdvisory'
-        displayName: '[DINE] Deploy Service Health Advisory Alert'
-        description: 'DINE policy to Deploy Service Health Advisory Alert'
+        displayName: 'Deploy Service Health Advisory Alert'
+         description: 'Policy to Deploy Service Health Advisory Alert'
         location: policyLocation
         metadata: {
             version: '1.1.0'
-            Category: 'ServiceHealth'
-            source: 'https://github.com/Azure/ALZ-Monitor/'
+            category: 'Monitoring'
+            source: 'https://github.com/Azure/Enterprise-Scale/' 
+            alzCloudEnvironments: [ 
+               'AzureCloud'
+              ]
             _deployed_by_alz_monitor: 'True'
         }
         parameters: {

diff --git a/...Microsoft.Authorization/policyDefinitions/deploy-activitylog-ServiceHealth-Incident.bicep b/...Microsoft.Authorization/policyDefinitions/deploy-activitylog-ServiceHealth-Incident.bicep
@@ -20,13 +20,16 @@ module ServiceHealthIncidentAlert '../../arm/Microsoft.Authorization/policyDefin
     name: '${uniqueString(deployment().name)}-shi-policyDefinitions'
     params: {
         name: 'Deploy_activitylog_ServiceHealth_Incident'
-        displayName: '[DINE] Deploy Service Health Incident Alert'
-        description: 'DINE policy to Deploy Service Health Incident Alert'
+        displayName: 'Deploy Service Health Incident Alert'
+         description: 'Policy to Deploy Service Health Incident Alert'
         location: policyLocation
         metadata: {
             version: '1.1.0'
-            Category: 'ServiceHealth'
-            source: 'https://github.com/Azure/ALZ-Monitor/'
+            category: 'Monitoring'
+            source: 'https://github.com/Azure/Enterprise-Scale/' 
+            alzCloudEnvironments: [ 
+               'AzureCloud'
+              ]
             _deployed_by_alz_monitor: 'True'
         }
         parameters: {

diff --git a/...rosoft.Authorization/policyDefinitions/deploy-activitylog-ServiceHealth-Maintenance.bicep b/...rosoft.Authorization/policyDefinitions/deploy-activitylog-ServiceHealth-Maintenance.bicep
@@ -20,13 +20,16 @@ module ServiceHealthMaintenanceAlert '../../arm/Microsoft.Authorization/policyDe
     name: '${uniqueString(deployment().name)}-shi-policyDefinitions'
     params: {
         name: 'Deploy_activitylog_ServiceHealth_Maintenance'
-        displayName: '[DINE] Deploy Service Health Maintenance Alert'
-        description: 'DINE policy to Deploy Service Health Maintenance Alert'
+        displayName: 'Deploy Service Health Maintenance Alert'
+         description: 'Policy to Deploy Service Health Maintenance Alert'
         location: policyLocation
         metadata: {
             version: '1.1.0'
-            Category: 'ServiceHealth'
-            source: 'https://github.com/Azure/ALZ-Monitor/'
+            category: 'Monitoring'
+            source: 'https://github.com/Azure/Enterprise-Scale/' 
+            alzCloudEnvironments: [ 
+               'AzureCloud'
+              ]
             _deployed_by_alz_monitor: 'True'
         }
         parameters: {

diff --git a/...Microsoft.Authorization/policyDefinitions/deploy-activitylog-ServiceHealth-Security.bicep b/...Microsoft.Authorization/policyDefinitions/deploy-activitylog-ServiceHealth-Security.bicep
@@ -20,13 +20,16 @@ module ServiceHealthSecurityAlert '../../arm/Microsoft.Authorization/policyDefin
     name: '${uniqueString(deployment().name)}-shi-policyDefinitions'
     params: {
         name: 'Deploy_activitylog_ServiceHealth_SecurityAdvisory'
-        displayName: '[DINE] Deploy Service Health Security Advisory Alert'
-        description: 'DINE policy to Deploy Service Health Security Advisory Alert'
+        displayName: 'Deploy Service Health Security Advisory Alert'
+         description: 'Policy to Deploy Service Health Security Advisory Alert'
         location: policyLocation
         metadata: {
             version: '1.1.0'
-            Category: 'ServiceHealth'
-            source: 'https://github.com/Azure/ALZ-Monitor/'
+            category: 'Monitoring'
+            source: 'https://github.com/Azure/Enterprise-Scale/' 
+            alzCloudEnvironments: [ 
+               'AzureCloud'
+              ]
             _deployed_by_alz_monitor: 'True'
         }
         parameters: {

diff --git a/src/resources/Microsoft.Authorization/policyDefinitions/deploy-activitylog-VPNGate-Del.bicep b/src/resources/Microsoft.Authorization/policyDefinitions/deploy-activitylog-VPNGate-Del.bicep
@@ -18,13 +18,16 @@ module ActivityLogVPNGatewayDeleteAlert '../../arm/Microsoft.Authorization/polic
     name: '${uniqueString(deployment().name)}-shi-policyDefinitions'
     params: {
         name: 'Deploy_activitylog_VPNGateway_Delete'
-        displayName: '[DINE] Deploy Activity Log VPN Gateway Delete Alert'
-        description: 'DINE policy to Deploy Activity Log VPN Gateway Delete Alert'
+        displayName: 'Deploy Activity Log VPN Gateway Delete Alert'
+         description: 'Policy to Deploy Activity Log VPN Gateway Delete Alert'
         location: policyLocation
         metadata: {
             version: '1.0.1'
-            Category: 'ActivityLog'
-            source: 'https://github.com/Azure/ALZ-Monitor/'
+            category: 'Network'
+            source: 'https://github.com/Azure/Enterprise-Scale/' 
+            alzCloudEnvironments: [ 
+               'AzureCloud'
+              ]
             _deployed_by_alz_monitor: 'True'
         }
         parameters: {

diff --git a/...resources/Microsoft.Authorization/policyDefinitions/deploy-afw_firewallhealth_alert.bicep b/...resources/Microsoft.Authorization/policyDefinitions/deploy-afw_firewallhealth_alert.bicep
@@ -56,13 +56,16 @@ module FirewallHealthAlert '../../arm/Microsoft.Authorization/policyDefinitions/
     name: '${uniqueString(deployment().name)}-afwfirewallhealth-policyDefinitions'
     params: {
         name: 'Deploy_AFW_FirewallHealth_Alert'
-        displayName: '[DINE] Deploy AFW FirewallHealth Alert'
-        description: 'DINE policy to audit/deploy Azure Firewall FirewallHealth Alert'
+        displayName: 'Deploy AFW FirewallHealth Alert'
+         description: 'Policy to audit/deploy Azure Firewall FirewallHealth Alert'
         location: policyLocation
         metadata: {
             version: '1.0.1'
-            Category: 'Networking'
-            source: 'https://github.com/Azure/ALZ-Monitor/'
+            category: 'Network'
+            source: 'https://github.com/Azure/Enterprise-Scale/' 
+            alzCloudEnvironments: [ 
+               'AzureCloud'
+              ]
             _deployed_by_alz_monitor: 'True'
         }
         parameters: {

diff --git a/...rces/Microsoft.Authorization/policyDefinitions/deploy-afw_snatportutilization_alert.bicep b/...rces/Microsoft.Authorization/policyDefinitions/deploy-afw_snatportutilization_alert.bicep
@@ -56,13 +56,16 @@ module SNATPortUtilizationAlert '../../arm/Microsoft.Authorization/policyDefinit
     name: '${uniqueString(deployment().name)}-afwsnatportutilization-policyDefinitions'
     params: {
         name: 'Deploy_AFW_SNATPortUtilization_Alert'
-        displayName: '[DINE] Deploy AFW SNATPortUtilization Alert'
-        description: 'DINE policy to audit/deploy Azure Firewall SNATPortUtilization Alert'
+        displayName: 'Deploy AFW SNATPortUtilization Alert'
+         description: 'Policy to audit/deploy Azure Firewall SNATPortUtilization Alert'
         location: policyLocation
         metadata: {
             version: '1.0.1'
-            Category: 'Networking'
-            source: 'https://github.com/Azure/ALZ-Monitor/'
+            category: 'Network'
+            source: 'https://github.com/Azure/Enterprise-Scale/' 
+            alzCloudEnvironments: [ 
+               'AzureCloud'
+              ]
             _deployed_by_alz_monitor: 'True'
         }
         parameters: {

diff --git a/...sources/Microsoft.Authorization/policyDefinitions/deploy-alertprocessingrule-deploy.bicep b/...sources/Microsoft.Authorization/policyDefinitions/deploy-alertprocessingrule-deploy.bicep
@@ -17,13 +17,16 @@ module AlertProcessingRule '../../arm/Microsoft.Authorization/policyDefinitions/
   name: '${uniqueString(deployment().name)}-shi-policyDefinitions'
   params: {
     name: 'Deploy_AlertProcessing_Rule'
-    displayName: '[DINE] Deploy Alert Processing Rule'
-    description: 'DINE policy to Deploy Deploy Alert Processing Rule with Action Group'
+    displayName: 'Deploy Alert Processing Rule'
+     description: 'Policy to Deploy Deploy Alert Processing Rule with Action Group'
     location: policyLocation
     metadata: {
       version: '1.0.1'
-      Category: 'Action Groups'
-      source: 'https://github.com/Azure/ALZ-Monitor/'
+      category: 'Monitoring'
+      source: 'https://github.com/Azure/Enterprise-Scale/' 
+            alzCloudEnvironments: [ 
+               'AzureCloud'
+              ]
       _deployed_by_alz_monitor: 'True'
     }
     parameters: {

diff --git a/...ources/Microsoft.Authorization/policyDefinitions/deploy-ercir_arpavailability_alert.bicep b/...ources/Microsoft.Authorization/policyDefinitions/deploy-ercir_arpavailability_alert.bicep
@@ -56,13 +56,16 @@ module ArpAvailabilityAlert '../../arm/Microsoft.Authorization/policyDefinitions
     name: '${uniqueString(deployment().name)}-ercirarpav-policyDefinitions'
     params: {
         name: 'Deploy_ERCIR_ArpAvailability_Alert'
-        displayName: '[DINE] Deploy ExpressRoute Circuits Arp Availability Alert'
-        description: 'DINE policy to audit/deploy ExpressRoute Circuits Arp Availability Alert'
+        displayName: 'Deploy ExpressRoute Circuits Arp Availability Alert'
+         description: 'Policy to audit/deploy ExpressRoute Circuits Arp Availability Alert'
         location: policyLocation
         metadata: {
             version: '1.0.1'
-            Category: 'Networking'
-            source: 'https://github.com/Azure/ALZ-Monitor/'
+            category: 'Network'
+            source: 'https://github.com/Azure/Enterprise-Scale/' 
+            alzCloudEnvironments: [ 
+               'AzureCloud'
+              ]
             _deployed_by_alz_monitor: 'True'
         }
         parameters: {

diff --git a/...ources/Microsoft.Authorization/policyDefinitions/deploy-ercir_bgpavailability_alert.bicep b/...ources/Microsoft.Authorization/policyDefinitions/deploy-ercir_bgpavailability_alert.bicep
@@ -56,13 +56,16 @@ module BgpAvailabilityAlert '../../arm/Microsoft.Authorization/policyDefinitions
     name: '${uniqueString(deployment().name)}-ercirbgpav-policyDefinitions'
     params: {
         name: 'Deploy_ERCIR_BgpAvailability_Alert'
-        displayName: '[DINE] Deploy ExpressRoute Circuits Bgp Availability Alert'
-        description: 'DINE policy to audit/deploy ExpressRoute Circuits Bgp Availability Alert'
+        displayName: 'Deploy ExpressRoute Circuits Bgp Availability Alert'
+         description: 'Policy to audit/deploy ExpressRoute Circuits Bgp Availability Alert'
         location: policyLocation
         metadata: {
             version: '1.0.1'
-            Category: 'Networking'
-            source: 'https://github.com/Azure/ALZ-Monitor/'
+            category: 'Network'
+            source: 'https://github.com/Azure/Enterprise-Scale/' 
+            alzCloudEnvironments: [ 
+               'AzureCloud'
+              ]
             _deployed_by_alz_monitor: 'True'
         }
         parameters: {

diff --git a/...sources/Microsoft.Authorization/policyDefinitions/deploy-ercir_qosdropsbitsin_alert.bicep b/...sources/Microsoft.Authorization/policyDefinitions/deploy-ercir_qosdropsbitsin_alert.bicep
@@ -54,13 +54,16 @@ module QosDropBitsInPerSecondAlert '../../arm/Microsoft.Authorization/policyDefi
     name: '${uniqueString(deployment().name)}-erqosdropsin-policyDefinitions'
     params: {
         name: 'Deploy_ERCIR_QosDropBitsInPerSecond_Alert'
-        displayName: '[DINE] Deploy ExpressRoute Circuits QosDropBitsInPerSecond Alert'
-        description: 'DINE policy to audit/deploy ExpressRoute Circuits QosDropBitsInPerSecond Alert'
+        displayName: 'Deploy ExpressRoute Circuits QosDropBitsInPerSecond Alert'
+         description: 'Policy to audit/deploy ExpressRoute Circuits QosDropBitsInPerSecond Alert'
         location: policyLocation
         metadata: {
             version: '1.0.1'
-            Category: 'Networking'
-            source: 'https://github.com/Azure/ALZ-Monitor/'
+            category: 'Network'
+            source: 'https://github.com/Azure/Enterprise-Scale/' 
+            alzCloudEnvironments: [ 
+               'AzureCloud'
+              ]
             _deployed_by_alz_monitor: 'True'
         }
         parameters: {