Policy Initiatives

This document details the ALZ-Monitor Azure policy initiatives leveraged for deploying the ALZ-Monitor baselines. For references on individual alerts/policies, refer to Alert Details.

This initiative is intended for assignment of policies relevant to networking components in ALZ. With the guidance provided in Introduction to deploying the ALZ Pattern, this will assign to the alz-platform-connectivity management group structure in the ALZ reference architecture. For details on which policies are included in the initiative as well as what the default enablement state of the policy is, refer to the below table.

This initiative is intended for assignment of policies relevant to management components in ALZ. With the guidance provided in Introduction to deploying the ALZ Pattern, this will assign to the alz-platform-management group structure in the ALZ reference architecture. For details on which policies are included in the initiative as well as what the default enablement state of the policy is, refer to the below table.

This initiative is intended for assignment of policies relevant to identity components in ALZ. With the guidance provided in Introduction to deploying the ALZ Pattern, this will assign to the alz-platform-identity management group structure in the ALZ reference architecture. For details on which policies are included in the initiative as well as what the default enablement state of the policy is, refer to the below table.

This initiative deploys Azure Monitor Baseline Alerts to monitor Key Management Services such as Azure Key Vault, and Managed HSM. With the guidance provided in Introduction to deploying the ALZ Pattern this will be assigned to the Landing Zones management group in the ALZ reference architecture. For details on which policies are included in the initiative as well as what the default enablement state of the policy is, refer to the below table.

This initiative deploys Azure Monitor Baseline Alerts to monitor Load Balancing Services such as Load Balancer, Application Gateway, Traffic Manager, and Azure Front Door. With the guidance provided in Introduction to deploying the ALZ Pattern this will be assigned to the Landing Zones management group in the ALZ reference architecture. For details on which policies are included in the initiative as well as what the default enablement state of the policy is, refer to the below table.

This initiative implements Azure Monitor Baseline Alerts to monitor alterations in Network Routing and Security, such as modifications to Route Tables and the removal of Network Security Groups. With the guidance provided in Introduction to deploying the ALZ Pattern this will be assigned to the Landing Zones management group in the ALZ reference architecture. For details on which policies are included in the initiative as well as what the default enablement state of the policy is, refer to the below table.

This initiative deploys Azure Monitor Baseline Alerts to monitor Recovery Services such as Azure Backup, and Azure Site Recovery. With the guidance provided in Introduction to deploying the ALZ Pattern this will be assigned to the Landing Zones management group in the ALZ reference architecture. For details on which policies are included in the initiative as well as what the default enablement state of the policy is, refer to the below table.

This initiative deploys Azure Monitor Baseline Alerts to monitor Storage Services such as Storage accounts. With the guidance provided in Introduction to deploying the ALZ Pattern this will be assigned to the Landing Zones management group in the ALZ reference architecture. For details on which policies are included in the initiative as well as what the default enablement state of the policy is, refer to the below table.

This initiative deploys Azure Monitor Baseline Alerts to monitor Azure Virtual Machines. With the guidance provided in Introduction to deploying the ALZ Pattern this will be assigned to the Landing Zones management group in the ALZ reference architecture. For details on which policies are included in the initiative as well as what the default enablement state of the policy is, refer to the below table.

This initiative deploys Azure Monitor Baseline Alerts to monitor Web Services such as App Services. This initiative is intended for assignment of policies relevant to a landing zone in the ALZ structure. With the guidance provided in Introduction to deploying the ALZ Pattern this will be assigned to the Landing Zones management group in the ALZ reference architecture. For details on which policies are included in the initiative as well as what the default enablement state of the policy is, refer to the below table.

This initiative is intended for assignment of policies relevant to Hybrid VM alerts in AMBA-ALZ. With the guidance provided in Introduction to deploying the ALZ Pattern, this will be assigned to the ‘alz’ intermediate root management group structure in the ALZ reference architecture. For details on which policies are included in the initiative as well as what the default policy effect is, refer to the below table.

This initiative is intended for assignment of policies relevant to service health alerts in ALZ. With the guidance provided in Introduction to deploying the ALZ Pattern, this will assign to the alz intermediate root management group structure in the ALZ reference architecture. For details on which policies are included in the initiative as well as what the default enablement state of the policy is, refer to the below table.

This initiative is intended for assignment of policies relevant to notification in AMBA-ALZ. With the guidance provided in Introduction to deploying the ALZ Pattern, this will assign to the alz intermediate root management group structure in the ALZ reference architecture. For details on which policies are included in the initiative as well as what the default enablement state of the policy is, refer to the below table.

This initiative is intended for assignment of policies relevant to a landing zone in the ALZ structure. With the guidance provided in Introduction to deploying the ALZ Pattern this will be assigned to the Landing Zones management group in the ALZ reference architecture. For details on which policies are included in the initiative as well as what the default enablement state of the policy is, refer to the below table.