Enhance PBMM policy assignment to disable diagnostic settings metrics (…

…Azure#156) Ensure diagnostic settings policy only checks for logs
cds-snc · Feb 4, 2022 · b628c68 · b628c68
1 parent 61afd59
commit b628c68
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/policy/builtin/assignments/pbmm.bicep b/policy/builtin/assignments/pbmm.bicep
@@ -59,6 +59,12 @@ resource policySetAssignment 'Microsoft.Authorization/policyAssignments@2020-03-
        listOfMembersToIncludeInWindowsVMAdministratorsGroup: {
         value: listOfMembersToIncludeInWindowsVMAdministratorsGroup
        }
+       'logsEnabled-7f89b1eb-583c-429a-8828-af049802c1d9': {
+         value: true
+       }
+       'metricsEnabled-7f89b1eb-583c-429a-8828-af049802c1d9': {
+         value: false
+       }
     }
     enforcementMode: enforcementMode
   }