landing-zone-diagnostic-settings

Type: decision

Decision

Diagnostic settings are defined by the platform — a landing zone never declares its own.

Why

Without a platform definition, each landing zone routes logs differently and some resources emit none.

Violations

• Resource type added to allowedResources.json without a diagnostic settings definition.

Links

• azure-native-services-only — Only ARM-reachable types can have diagnostic settings defined.
• deployment-config-in-repo — The landing zone's policy assignment points at the platform's definition by resource ID, passed in as a repo variable.
• landing-zone-automation — Resources that already exist are only fixed when the remediation job runs in the landing zone.

← Back to knowledge graph