Add Centralized Log Analytics Workspace and add Security Center #438
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
glennmusa
changed the title
glennmusa
suggested changes
Oct 6, 2021
glennmusa
approved these changes
Oct 8, 2021
Had left over tagging changes used for testing conflicting with most up to date main.
shawngib
changed the title
shawngib
changed the title
jwaltireland
pushed a commit
to ARPA-H/AzureMissionLZ
that referenced
this pull request
Nov 14, 2024
…e#438) - Add solutions (consolidated solutions removing separate sentinel module) - Security - Security Insights (Sentinel which is optional) - Activity log - VM Insights - Container Insights - Key Vault Insights - ServiceMap (dependency agent for network monitoring) - Add option to lock LAWS - Add diagnostic settings for LAWS to LAWS and operations Storage Account - Add policy assignments for DINE agents on VMs - Add extensions to VMs manually for initial deployment of jumpboxes - Add remediation for DINE agent policies - (Optional parameter to enable) - Required a role assignment for managed identity to contributor of RG - Add role assignments for IL5/CMMC/NIST policies - Add option to enable ASC - pricing &Azure#39;standard&Azure#39; (defender) - Enable auto provision - redirect to ops LAWS - Option add Email contact to ASC - Enable notifications - Enable recommendations - Add azure private link for Azure Monitor for VM agents to communicate - Scopes for Azure Monitor - DNS entries for monitor - NSG entries for monitor Co-authored-by: github-actions <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
For the purposes of understand security and compliance posture of a landing zone the following changes will the use of Azure Security Center, Policy, and VM monitoring to gain insights and control.
Start of a Centralized LAWS
Issue reference
The issue this PR will close: #413
Checklist
Please make sure you've completed the relevant tasks for this PR out of the following list: