Add missing log categories in diagnostic settings for Azure Firewall (A…

…zure#324)
cds-snc · Jul 20, 2022 · a7f521d · a7f521d
1 parent 60198bc
commit a7f521d
Showing 1 changed file with 40 additions and 0 deletions.
diff --git a/policy/custom/definitions/policy/LA-Microsoft.Network-azureFirewalls/azurepolicy.rules.json b/policy/custom/definitions/policy/LA-Microsoft.Network-azureFirewalls/azurepolicy.rules.json
@@ -91,6 +91,46 @@
                     {
                       "category": "AzureFirewallDnsProxy",
                       "enabled": "[parameters('logsEnabled')]"
+                    },
+                    {
+                      "category": "AZFWNetworkRule",
+                      "enabled": "[parameters('logsEnabled')]"
+                    },
+                    {
+                      "category": "AZFWApplicationRule",
+                      "enabled": "[parameters('logsEnabled')]"
+                    },
+                    {
+                      "category": "AZFWNatRule",
+                      "enabled": "[parameters('logsEnabled')]"
+                    },
+                    {
+                      "category": "AZFWThreatIntel",
+                      "enabled": "[parameters('logsEnabled')]"
+                    },
+                    {
+                      "category": "AZFWIdpsSignature",
+                      "enabled": "[parameters('logsEnabled')]"
+                    },
+                    {
+                      "category": "AZFWDnsQuery",
+                      "enabled": "[parameters('logsEnabled')]"
+                    },
+                    {
+                      "category": "AZFWFqdnResolveFailure",
+                      "enabled": "[parameters('logsEnabled')]"
+                    },
+                    {
+                      "category": "AZFWApplicationRuleAggregation",
+                      "enabled": "[parameters('logsEnabled')]"
+                    },
+                    {
+                      "category": "AZFWNetworkRuleAggregation",
+                      "enabled": "[parameters('logsEnabled')]"
+                    },
+                    {
+                      "category": "AZFWNatRuleAggregation",
+                      "enabled": "[parameters('logsEnabled')]"
                     }
                   ]
                 }