Sentinel onboarding via OnboardingStates API (Azure#811)

* Call to "onboardingStates" to enable Sentinel * chore: Updated API versions to latest ones * Reverted - chore: Updated API versions to latest ones
jtracey93 · Jul 11, 2024 · 9517fc2 · 9517fc2
1 parent 038090c
commit 9517fc2
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/infra-as-code/bicep/modules/logging/logging.bicep b/infra-as-code/bicep/modules/logging/logging.bicep
@@ -637,6 +637,13 @@ resource resDataCollectionRuleMDFCSQLLock 'Microsoft.Authorization/locks@2020-05
   }
 }
 
+// Onboard the Log Analytics Workspace to Sentinel if SecurityInsights is in parLogAnalyticsWorkspaceSolutions
+resource resSentinelOnboarding 'Microsoft.SecurityInsights/onboardingStates@2024-03-01' = if (contains(parLogAnalyticsWorkspaceSolutions, 'SecurityInsights')) {
+  name: 'default'
+  scope: resLogAnalyticsWorkspace
+  properties: {}
+}
+
 resource resLogAnalyticsWorkspaceSolutions 'Microsoft.OperationsManagement/solutions@2015-11-01-preview' = [for solution in parLogAnalyticsWorkspaceSolutions: {
   name: '${solution}(${resLogAnalyticsWorkspace.name})'
   location: parLogAnalyticsWorkspaceLocation