Giters

Azure / Enterprise-Scale

The Azure Landing Zones (Enterprise-Scale) architecture provides prescriptive guidance coupled with Azure best practices, and it follows design principles across the critical design areas for organizations to define their Azure architecture

Home Page:https://aka.ms/alz

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Feature Request: regional setup for monitoring

steph409 opened this issue · comments

commented

Describe the solution you'd like

Many scenarios, e.g. regulatory or data compliance requirements, require a more finegranular approach to logging. For instance, logs from EU should be stored in europe, while logs from US should be stored in US. It would be great, if enterprise scale would support such scenarios. A big milestone was added lately, where the diagnostic logs initiative now has a parameter resourceLocationList to specify which logs should go to the log analytics workspace.
This concept should be extended to Azure Monitor (using datacollection rules) and azure activity logs.

Activity logs are often most critical, as they contain PII. Is it possible to configure activity logs to stream to a specific LAW depending on the region the resource is in? Would you then set the activity log setting on each resource rather than on subscription level? What are the downsides from this?

Best regards,
Stephanie