Policy Initiatives

This document details the AMBA-ALZ pattern Azure policy initiatives used for deploying the AMBA-ALZ baselines. For references on individual alerts/policies, refer to Alert Details.

This initiative is intended for relevant policy assignment to networking components in ALZ. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern, this will assign policies to the alz-platform-connectivity management group structure in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.

This initiative is intended for relevant policy assignment to management components in AMBA-ALZ. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern, this will assign policies to the alz-platform-management group structure in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.

This initiative is intended for relevant policy assignment to identity components in ALZ. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern, this will assign policies to the alz-platform-identity management group structure in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.

This initiative deploys Azure Monitor Baseline Alerts to monitor Key Management Services such as Azure Key Vault, and Managed HSM. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern this will be assigned to the Landing Zones management group in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.

This initiative deploys Azure Monitor Baseline Alerts to monitor Load Balancing Services such as Load Balancer, Application Gateway, Traffic Manager, and Azure Front Door. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern this will be assigned to the Landing Zones management group in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.

This initiative implements Azure Monitor Baseline Alerts to monitor alterations in Network Routing and Security, such as modifications to Route Tables and the removal of Network Security Groups. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern this will be assigned to the Landing Zones management group in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.

This initiative deploys Azure Monitor Baseline Alerts to monitor Recovery Services such as Azure Backup, and Azure Site Recovery. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern this will be assigned to the Landing Zones management group in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.

This initiative deploys Azure Monitor Baseline Alerts to monitor Storage Services such as Storage accounts. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern this will be assigned to the Landing Zones management group in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.

This initiative deploys Azure Monitor Baseline Alerts to monitor Azure Virtual Machines. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern this will be assigned to the Landing Zones management group in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.

This initiative deploys Azure Monitor Baseline Alerts to monitor Web Services such as App Services. It is intended for relevant policy assignment to a landing zone in the ALZ structure. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern this will be assigned to the Landing Zones management group in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.

This initiative is intended for relevant policy assignment to Hybrid VM alerts in AMBA-ALZ. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern, this will be assigned to the ‘alz’ intermediate root management group structure in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.

This initiative is intended for relevant policy assignment service health alerts in ALZ. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern, this will assign to the alz intermediate root management group structure in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.

This initiative is intended for relevant policy assignment to notification in AMBA-ALZ. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern, this will assign to the alz intermediate root management group structure in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.

This initiative is intended for relevant policy assignment to a landing zone in the ALZ structure. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern this will be assigned to the Landing Zones management group in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.