adding diag to st account (#523)

microsoft · Feb 1, 2024 · 8a0d76e · 8a0d76e
1 parent cef195b
commit 8a0d76e
Showing 1 changed file with 42 additions and 0 deletions.
diff --git a/fsi/solutions/generativeAi/storageAccount.json b/fsi/solutions/generativeAi/storageAccount.json
@@ -62,13 +62,22 @@
                 "Yes",
                 "No"
             ]
+        },
+        "stMonCreate": {
+            "type": "string",
+            "defaultValue": "No",
+            "allowedValues": [
+                "Yes",
+                "No"
+            ]
         }
     },
     "variables": {
         "name-compliant-storage": "[toLower(take(concat(replace(replace(parameters('prefix'), '-', ''), '_', ''), parameters('location'), uniqueString(deployment().name)), 23))]",
         "name-compliant-keyvault": "[concat(parameters('prefix'), '-', parameters('location'), '-kv')]",
         "name-compliant-storage-asg": "[concat(parameters('prefix'), '-storage-asg')]",
         "name-compliant-storage-pe": "[concat(parameters('prefix'), '-storage-pe')]",
+        "name-compliant-azMon": "[concat(parameters('prefix'), '-', parameters('location'), '-azmon')]",
         "cmk": {
             "requireInfrastructureEncryption": true,
             "identity": {
@@ -183,6 +192,39 @@
                                 }
                             }
                         },
+                        {
+                            "condition": "[equals(parameters('stMonCreate'), 'Yes')]",
+                            "type": "Microsoft.Storage/storageAccounts/blobServices/providers/diagnosticSettings",
+                            "apiVersion": "2021-05-01-preview",
+                            "name": "[concat(variables('name-compliant-storage'), '/default/', 'Microsoft.Insights/', 'diag')]",
+                            "location": "[parameters('location')]",
+                            "dependsOn": [
+                                "[concat('Microsoft.Storage/storageAccounts/', variables('name-compliant-storage'))]"
+                            ],
+                            "properties": {
+                                "workspaceId": "[concat(subscription().id, '/resourceGroups/', parameters('rgName'), '/providers/Microsoft.OperationalInsights/workspaces/', variables('name-compliant-azMon'))]",
+                                "metrics": [
+                                    {
+                                        "category": "AllMetrics",
+                                        "enabled": true
+                                    }
+                                ],
+                                "logs": [
+                                    {
+                                        "category": "StorageRead",
+                                        "enabled": true
+                                    },
+                                    {
+                                        "category": "StorageWrite",
+                                        "enabled": true
+                                    },
+                                    {
+                                        "category": "StorageDelete",
+                                        "enabled": true
+                                    }
+                                ]
+                            }
+                        },
                         {
                             "condition": "[and(equals(parameters('stDisableNetworkAccess'), 'Yes'), not(empty(parameters('stSubnetId'))))]",
                             "type": "Microsoft.Network/applicationSecurityGroups",