Policy Initiatives

Overview
Connectivity Initiative - Part #1
Connectivity Initiative - Part #2
Management Initiative
Identity Initiative
Key Management Initiative
Load Balancing Initiative
Network Changes Initiative
Recovery Services Initiative
Storage Initiative
Azure VM Initiative
Web Initiative
Hybrid VM Initiative
Service Health Initiative
Notification Assets Initiative
Landing Zone Initiative (Deprecated)

This document details the AMBA-ALZ pattern Azure policy initiatives used for deploying the AMBA-ALZ baselines. For references on individual alerts/policies, refer to Alert Details.

This initiative is intended for relevant policy assignment to networking components in ALZ. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern, this will assign policies to the alz-platform-connectivity management group structure in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.

This second part of the initiative is intended for relevant policy assignment to networking components in ALZ. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern, this will assign policies to the alz-platform-connectivity management group structure in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.

This initiative is intended for relevant policy assignment to management components in AMBA-ALZ. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern, this will assign policies to the alz-platform-management group structure in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.

This initiative is intended for relevant policy assignment to identity components in ALZ. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern, this will assign policies to the alz-platform-identity management group structure in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.

This initiative deploys Azure Monitor Baseline Alerts to monitor Key Management Services such as Azure Key Vault, and Managed HSM. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern this will be assigned to the Landing Zones management group in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.

This initiative deploys Azure Monitor Baseline Alerts to monitor Load Balancing Services such as Load Balancer, Application Gateway, Traffic Manager, and Azure Front Door. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern this will be assigned to the Landing Zones management group in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.

This initiative implements Azure Monitor Baseline Alerts to monitor alterations in Network Routing and Security, such as modifications to Route Tables and the removal of Network Security Groups. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern this will be assigned to the Landing Zones management group in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.

This initiative deploys Azure Monitor Baseline Alerts to monitor Recovery Services such as Azure Backup, and Azure Site Recovery. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern this will be assigned to the Landing Zones management group in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.

This initiative deploys Azure Monitor Baseline Alerts to monitor Storage Services such as Storage accounts. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern this will be assigned to the Landing Zones management group in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.

This initiative deploys Azure Monitor Baseline Alerts to monitor Azure Virtual Machines. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern this will be assigned to the Landing Zones management group in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.

This initiative deploys Azure Monitor Baseline Alerts to monitor Web Services such as App Services. It is intended for relevant policy assignment to a landing zone in the ALZ structure. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern this will be assigned to the Landing Zones management group in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.

This initiative is intended for relevant policy assignment to Hybrid VM alerts in AMBA-ALZ. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern, this will be assigned to the ‘alz’ intermediate root management group structure in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.

This initiative is intended for relevant policy assignment service health alerts in ALZ. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern, this will assign to the alz intermediate root management group structure in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.

This initiative is intended for relevant policy assignment to notification in AMBA-ALZ. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern, this will assign to the alz intermediate root management group structure in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.

This initiative has been DEPRECATED and the content is still included in the documentation for reference purpose only.

This initiative is intended for relevant policy assignment to a landing zone in the ALZ structure. Using the guidance provided in Introduction to deploying the AMBA-ALZ Pattern this will be assigned to the Landing Zones management group in the ALZ reference architecture. For details on the initiative policies and their default enablement state, refer to the table below.