landing-zone-diagnostic-settings

Type: decision

Decision

Every whitelisted resource type has diagnostic settings deployed automatically via DeployIfNotExists policy. Telemetry flows to the landing zone's Log Analytics workspace with no team action required.

Why

Opt-in telemetry produces gaps that surface only during an incident.

Links

• azure-policy-naming-convention — Must use a Config-prefixed assignment for diagnostic settings.
• azure-native-services-only — Diagnostic settings target only Azure native resources.

← Back to all decisions