Policy: Implement DenyAction

[4pplied]

Overview/Summary

Implementation of DenyAction Delete into Azure Landing Zones for both Activity Logs and Diagnostic Settings as two seperate policy definitions and a policy initiative.

Address story AB#29619

This PR fixes/adds/changes/removes

1. Two policy definitions for DenyAction Delete Activity Logs and Diagnostic Settings
2. A policy initiative to apply these two policy definitions

Breaking Changes

1. N/A

Testing Evidence

To Be Delivered.

Testing URLs

Azure Public

Azure US Gov (Fairfax)

As part of this Pull Request I have

• Checked for duplicate Pull Requests
• Associated it with relevant issues, for tracking and closure.
• Ensured my code/branch is up-to-date with the latest changes in the main branch
• [] Performed testing and provided evidence.
• Ensured contribution guidance is followed.
• Updated relevant and associated documentation.
• Updated the "What's New?" wiki page (located: /docs/wiki/whats-new.md)

[Springstone]

Please redirect the PR to the policy-refresh-q1fy24 branch