feat: Add onboardingStates extension resource to avm/res/operational-insights/workspace

avm/res/operational-insights/workspace/README.md

@@ -27,6 +27,7 @@ This module deploys a Log Analytics Workspace.
 | `Microsoft.OperationalInsights/workspaces/storageInsightConfigs` | [2020-08-01](https://learn.microsoft.com/en-us/azure/templates/Microsoft.OperationalInsights/2020-08-01/workspaces/storageInsightConfigs) |
 | `Microsoft.OperationalInsights/workspaces/tables` | [2022-10-01](https://learn.microsoft.com/en-us/azure/templates/Microsoft.OperationalInsights/2022-10-01/workspaces/tables) |
 | `Microsoft.OperationsManagement/solutions` | [2015-11-01-preview](https://learn.microsoft.com/en-us/azure/templates/Microsoft.OperationsManagement/2015-11-01-preview/solutions) |
+| `Microsoft.SecurityInsights/onboardingStates` | [2024-03-01](https://learn.microsoft.com/en-us/azure/templates/Microsoft.SecurityInsights/onboardingStates) |
 
 ## Usage examples
 
@@ -199,8 +200,8 @@ module workspace 'br/public:avm/res/operational-insights/workspace:<version>' =
     ]
     gallerySolutions: [
       {
-        name: 'AzureAutomation'
-        product: 'OMSGallery'
+        name: 'AzureAutomation(oiwadv001)'
+        product: 'OMSGallery/AzureAutomation'
         publisher: 'Microsoft'
       }
     ]
@@ -507,8 +508,8 @@ module workspace 'br/public:avm/res/operational-insights/workspace:<version>' =
     "gallerySolutions": {
       "value": [
         {
-          "name": "AzureAutomation",
-          "product": "OMSGallery",
+          "name": "AzureAutomation(oiwadv001)",
+          "product": "OMSGallery/AzureAutomation",
           "publisher": "Microsoft"
         }
       ]
@@ -825,8 +826,8 @@ param diagnosticSettings = [
 ]
 param gallerySolutions = [
   {
-    name: 'AzureAutomation'
-    product: 'OMSGallery'
+    name: 'AzureAutomation(oiwadv001)'
+    product: 'OMSGallery/AzureAutomation'
     publisher: 'Microsoft'
   }
 ]
@@ -1153,8 +1154,18 @@ module workspace 'br/public:avm/res/operational-insights/workspace:<version>' =
     ]
     gallerySolutions: [
       {
-        name: 'AzureAutomation'
-        product: 'OMSGallery'
+        name: 'AzureAutomation(oiwmax001)'
+        product: 'OMSGallery/AzureAutomation'
+        publisher: 'Microsoft'
+      }
+      {
+        name: 'SecurityInsights(oiwmax001)'
+        product: 'OMSGallery/SecurityInsights'
+        publisher: 'Microsoft'
+      }
+      {
+        name: 'SQLAuditing(oiwmax001)'
+        product: 'SQLAuditing'
         publisher: 'Microsoft'
       }
     ]
@@ -1178,6 +1189,7 @@ module workspace 'br/public:avm/res/operational-insights/workspace:<version>' =
     managedIdentities: {
       systemAssigned: true
     }
+    onboardWorkspaceToSentinel: true
     publicNetworkAccessForIngestion: 'Disabled'
     publicNetworkAccessForQuery: 'Disabled'
     roleAssignments: [
@@ -1455,8 +1467,18 @@ module workspace 'br/public:avm/res/operational-insights/workspace:<version>' =
     "gallerySolutions": {
       "value": [
         {
-          "name": "AzureAutomation",
-          "product": "OMSGallery",
+          "name": "AzureAutomation(oiwmax001)",
+          "product": "OMSGallery/AzureAutomation",
+          "publisher": "Microsoft"
+        },
+        {
+          "name": "SecurityInsights(oiwmax001)",
+          "product": "OMSGallery/SecurityInsights",
+          "publisher": "Microsoft"
+        },
+        {
+          "name": "SQLAuditing(oiwmax001)",
+          "product": "SQLAuditing",
           "publisher": "Microsoft"
         }
       ]
@@ -1491,6 +1513,9 @@ module workspace 'br/public:avm/res/operational-insights/workspace:<version>' =
         "systemAssigned": true
       }
     },
+    "onboardWorkspaceToSentinel": {
+      "value": true
+    },
     "publicNetworkAccessForIngestion": {
       "value": "Disabled"
     },
@@ -1773,8 +1798,18 @@ param diagnosticSettings = [
 ]
 param gallerySolutions = [
   {
-    name: 'AzureAutomation'
-    product: 'OMSGallery'
+    name: 'AzureAutomation(oiwmax001)'
+    product: 'OMSGallery/AzureAutomation'
+    publisher: 'Microsoft'
+  }
+  {
+    name: 'SecurityInsights(oiwmax001)'
+    product: 'OMSGallery/SecurityInsights'
+    publisher: 'Microsoft'
+  }
+  {
+    name: 'SQLAuditing(oiwmax001)'
+    product: 'SQLAuditing'
     publisher: 'Microsoft'
   }
 ]
@@ -1798,6 +1833,7 @@ param lock = {
 param managedIdentities = {
   systemAssigned: true
 }
+param onboardWorkspaceToSentinel = true
 param publicNetworkAccessForIngestion = 'Disabled'
 param publicNetworkAccessForQuery = 'Disabled'
 param roleAssignments = [
@@ -2062,8 +2098,8 @@ module workspace 'br/public:avm/res/operational-insights/workspace:<version>' =
     ]
     gallerySolutions: [
       {
-        name: 'AzureAutomation'
-        product: 'OMSGallery'
+        name: 'AzureAutomation(oiwwaf001)'
+        product: 'OMSGallery/AzureAutomation'
         publisher: 'Microsoft'
       }
     ]
@@ -2231,8 +2267,8 @@ module workspace 'br/public:avm/res/operational-insights/workspace:<version>' =
     "gallerySolutions": {
       "value": [
         {
-          "name": "AzureAutomation",
-          "product": "OMSGallery",
+          "name": "AzureAutomation(oiwwaf001)",
+          "product": "OMSGallery/AzureAutomation",
           "publisher": "Microsoft"
         }
       ]
@@ -2408,8 +2444,8 @@ param diagnosticSettings = [
 ]
 param gallerySolutions = [
   {
-    name: 'AzureAutomation'
-    product: 'OMSGallery'
+    name: 'AzureAutomation(oiwwaf001)'
+    product: 'OMSGallery/AzureAutomation'
     publisher: 'Microsoft'
   }
 ]
@@ -2483,6 +2519,7 @@ param useResourcePermissions = true
 | [`location`](#parameter-location) | string | Location for all resources. |
 | [`lock`](#parameter-lock) | object | The lock settings of the service. |
 | [`managedIdentities`](#parameter-managedidentities) | object | The managed identity definition for this resource. Only one type of identity is supported: system-assigned or user-assigned, but not both. |
+| [`onboardWorkspaceToSentinel`](#parameter-onboardworkspacetosentinel) | bool | Onboard the Log Analytics Workspace to Sentinel. Requires 'SecurityInsights' solution to be in gallerySolutions. |
 | [`publicNetworkAccessForIngestion`](#parameter-publicnetworkaccessforingestion) | string | The network access type for accessing Log Analytics ingestion. |
 | [`publicNetworkAccessForQuery`](#parameter-publicnetworkaccessforquery) | string | The network access type for accessing Log Analytics query. |
 | [`roleAssignments`](#parameter-roleassignments) | array | Array of role assignments to create. |
@@ -2717,7 +2754,40 @@ List of gallerySolutions to be created in the log analytics workspace.
 
 - Required: No
 - Type: array
-- Default: `[]`
+
+**Required parameters**
+
+| Parameter | Type | Description |
+| :-- | :-- | :-- |
+| [`name`](#parameter-gallerysolutionsname) | string | Name of the solution.<p>For solutions authored by Microsoft, the name must be in the pattern: `SolutionType(WorkspaceName)`, for example: `AntiMalware(contoso-Logs)`.<p>For solutions authored by third parties, the name should be in the pattern: `SolutionType[WorkspaceName]`, for example `MySolution[contoso-Logs]`.<p>The solution type is case-sensitive. |
+| [`product`](#parameter-gallerysolutionsproduct) | string | The product name of the deployed solution.<p>For Microsoft published gallery solution it should be `OMSGallery/{solutionType}`, for example `OMSGallery/AntiMalware`.<p>For a third party solution, it can be anything.<p>This is case sensitive. |
+
+**Optional parameters**
+
+| Parameter | Type | Description |
+| :-- | :-- | :-- |
+| [`publisher`](#parameter-gallerysolutionspublisher) | string | The publisher name of the deployed solution. For Microsoft published gallery solution, it is `Microsoft`, which is the default value. |
+
+### Parameter: `gallerySolutions.name`
+
+Name of the solution.<p>For solutions authored by Microsoft, the name must be in the pattern: `SolutionType(WorkspaceName)`, for example: `AntiMalware(contoso-Logs)`.<p>For solutions authored by third parties, the name should be in the pattern: `SolutionType[WorkspaceName]`, for example `MySolution[contoso-Logs]`.<p>The solution type is case-sensitive.
+
+- Required: Yes
+- Type: string
+
+### Parameter: `gallerySolutions.product`
+
+The product name of the deployed solution.<p>For Microsoft published gallery solution it should be `OMSGallery/{solutionType}`, for example `OMSGallery/AntiMalware`.<p>For a third party solution, it can be anything.<p>This is case sensitive.
+
+- Required: Yes
+- Type: string
+
+### Parameter: `gallerySolutions.publisher`
+
+The publisher name of the deployed solution. For Microsoft published gallery solution, it is `Microsoft`, which is the default value.
+
+- Required: No
+- Type: string
 
 ### Parameter: `linkedServices`
 
@@ -2783,7 +2853,7 @@ The managed identity definition for this resource. Only one type of identity is
 | Parameter | Type | Description |
 | :-- | :-- | :-- |
 | [`systemAssigned`](#parameter-managedidentitiessystemassigned) | bool | Enables system assigned managed identity on the resource. |
-| [`userAssignedResourceIds`](#parameter-managedidentitiesuserassignedresourceids) | array | The resource ID(s) to assign to the resource. |
+| [`userAssignedResourceIds`](#parameter-managedidentitiesuserassignedresourceids) | array | The resource ID(s) to assign to the resource. Required if a user assigned identity is used for encryption. |
 
 ### Parameter: `managedIdentities.systemAssigned`
 
@@ -2794,11 +2864,19 @@ Enables system assigned managed identity on the resource.
 
 ### Parameter: `managedIdentities.userAssignedResourceIds`
 
-The resource ID(s) to assign to the resource.
+The resource ID(s) to assign to the resource. Required if a user assigned identity is used for encryption.
 
 - Required: No
 - Type: array
 
+### Parameter: `onboardWorkspaceToSentinel`
+
+Onboard the Log Analytics Workspace to Sentinel. Requires 'SecurityInsights' solution to be in gallerySolutions.
+
+- Required: No
+- Type: bool
+- Default: `False`
+
 ### Parameter: `publicNetworkAccessForIngestion`
 
 The network access type for accessing Log Analytics ingestion.
@@ -3023,7 +3101,8 @@ This section gives you an overview of all local-referenced module files (i.e., o
 
 | Reference | Type |
 | :-- | :-- |
-| `br/public:avm/res/operations-management/solution:0.1.0` | Remote reference |
+| `br/public:avm/res/operations-management/solution:0.2.0` | Remote reference |
+| `br/public:avm/utl/types/avm-common-types:0.2.1` | Remote reference |
 
 ## Data Collection