Ri refreshv3

[krnese]

This PR fixes

• Update of RIs
• Added updated policy for NSG Flow Log to Log Analytics (v2)

[matt-FFFFFF]

@krnese Please could you add an additional parameter and some additional validation to the deploy-nsg-flowlogs policy ?

Here is a new parameters object, below is the new policyRule...

Improvements

• targetRegion param allows us to assign this policy multiple times. Once for each region (as the storage account must be in the same region as the NSG).
• Additional allowedValues checking on params

"Properties": {
  "Description": "Deploys NSG flow logs and traffic analytics to a storageaccountid with a specified retention period. This must be assigned once for each in-scope region because the storage account and NSG must be in the same region. Must also be assigned at a MG Scope that covers the LA workspace and NetworkwatcherRG.",
  "DisplayName": "Deploys NSG flow logs and traffic analytics for a region",
  "Mode": "All",
  "Parameters": {
    "retention": {
      "type": "Integer",
      "metadata": {
        "displayName": "Retention (days)"
      },
      "defaultValue": 5
    },
    "storageAccountResourceId": {
      "type": "String",
      "metadata": {
        "displayName": "Storage Account Resource Id",
        "strongType": "Microsoft.Storage/storageAccounts"
      }
    },
    "trafficAnalyticsInterval": {
      "type": "Integer",
      "metadata": {
        "displayName": "Traffic Analytics processing interval mins (10/60)"
      },
      "defaultValue": 60,
      "allowedValues": [
        10,
        60
      ]
    },
    "flowAnalyticsEnabled": {
      "type": "Boolean",
      "metadata": {
        "displayName": "Enable Traffic Analytics"
      },
      "defaultValue": false,
      "allowedValues": [
        true,
        false
      ]
    },
    "logAnalytics": {
      "type": "String",
      "metadata": {
        "strongType": "omsWorkspace",
        "displayName": "Resource ID of Log Analytics workspace",
        "description": "Select Log Analytics workspace from dropdown list. If this workspace is outside of the scope of the assignment you must manually grant 'Log Analytics Contributor' permissions (or similar) to the policy assignment's principal ID."
      },
      "defaultValue": ""
    },
    "effect": {
      "type": "String",
      "metadata": {
        "displayName": "Effect",
        "description": "Enable or disable the execution of the policy"
      },
      "allowedValues": [
        "DeployIfNotExists",
        "Disabled"
      ],
      "defaultValue": "DeployIfNotExists"
    }
  }

"PolicyRule": {
  "if": {
    "allOf": [
      {
        "field": "type",
        "equals": "Microsoft.Network/networkSecurityGroups"
      },
      {
        "field": "location",
        "equals": "[parameters('targetRegion')]"
      }
    ]
  },