Fix for Diag Setting category for Cosmos DB (#1425)

Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
Azure · Sep 20, 2023 · 18f3c43 · 18f3c43
1 parent b25db50
commit 18f3c43
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 4 deletions.
diff --git a/docs/wiki/Whats-new.md b/docs/wiki/Whats-new.md
@@ -48,6 +48,7 @@ Here's what's changed in Enterprise Scale/Azure Landing Zones:
 - Added two new definitions with Deny Action feature:
   - `DenyAction-ActivityLogSettings.json`
   - `DenyAction-DiagnosticSettings.json`
+- Bug fix for missing diagnostic settings category for policy `Deploy-Diagnostics-CosmosDB`
 - Added the [Configure Azure Databricks workspace to use private DNS zones](https://www.azadvertizer.com/azpolicyadvertizer/0eddd7f3-3d9b-4927-a07a-806e8ac9486c.html) built-in policy to the "Deploy-Private-DNS-Zones" initiative and assignment.
 
 > **Important:** For existing ALZ deployments, you will need to redeploy the below assignments with least privilege RBAC roles, and review and remove existing service principals `Owner` role assignments. The below list includes the scope that needs to be reviewed. For new deployments, the below assignments will be deployed with least privilege RBAC roles.

diff --git a/eslzArm/managementGroupTemplates/policyDefinitions/policies.json b/eslzArm/managementGroupTemplates/policyDefinitions/policies.json
diff --git a/src/resources/Microsoft.Authorization/policyDefinitions/Deploy-Diagnostics-CosmosDB.json b/src/resources/Microsoft.Authorization/policyDefinitions/Deploy-Diagnostics-CosmosDB.json
@@ -9,7 +9,7 @@
     "displayName": "Deploy Diagnostic Settings for Cosmos DB to Log Analytics workspace",
     "description": "Deploys the diagnostic settings for Cosmos DB to stream to a Log Analytics workspace when any Cosmos DB which is missing this diagnostic settings is created or updated. The Policy will set the diagnostic with all metrics and category enabled",
     "metadata": {
-      "version": "1.1.0",
+      "version": "1.2.0",
       "category": "Monitoring",
       "source": "https://github.com/Azure/Enterprise-Scale/",
       "alzCloudEnvironments": [
@@ -181,6 +181,10 @@
                         {
                           "category": "GremlinRequests",
                           "enabled": "[[parameters('logsEnabled')]"
+                        },
+                        {
+                          "category": "TableApiRequests",
+                          "enabled": "[[parameters('logsEnabled')]"
                         }
                       ]
                     }