ALZ-MonitorServiceHealth.json

{
  "$schema": "https://schema.management.azure.com/schemas/2019-08-01/managementGroupDeploymentTemplate.json#",
  "contentVersion": "1.0.0.0",
  "parameters": {
    "parTelemetryOptOut": {
      "type": "bool",
      "defaultValue": false,
      "metadata": {
        "description": "Set Parameter to true to Opt-out of deployment telemetry"
      }
    }
  },
  "variables": {
    "varCuaid": "7e6d4601-dfd7-4996-8ea6-3e1ef93758f1"
  },
  "resources": [
    {
      "type": "Microsoft.Authorization/policySetDefinitions",
      "apiVersion": "2021-06-01",
      "name": "Alerting-ServiceHealth",
      "properties": {
        "displayName": "Deploy Service Health alerts",
        "description": "This policy set deploys Service Health alerts for Azure services. Aslo a basic action and alert processing rule is deployed",
        "metadata": {
          "version": "1.1.0",
          "category": "Monitoring",
          "source": "https://github.com/Azure/Enterprise-Scale/",
          "alzCloudEnvironments": [ 
             "AzureCloud"
            ],
          "_deployed_by_alz_monitor": true
        },
        "parameters": {
          "ALZMonitorResourceGroupName": {
            "type": "String",
            "defaultValue": "ALZ-Monitoring-RG",
            "metadata": {
              "displayName": "Resource Group Name",
              "description": "Name of the resource group to deploy the alerts to"
            }
          },
          "ALZMonitorResourceGroupTags": {
            "type": "Object",
            "defaultValue": {
              "_deployed_by_alz_monitor": true
            },
            "metadata": {
              "displayName": "Resource Group Tags",
              "description": "Tags to apply to the resource group"
            }
          },
          "ALZMonitorResourceGroupLocation": {
            "type": "String",
            "defaultValue": "centralus",
            "metadata": {
              "displayName": "Resource Group Location",
              "description": "Location of the resource group"
            }
          },
          "ResHlthUnhealthyAlertState": {
            "type": "string",
            "defaultValue": "true",
            "metadata": {
              "displayName": "Resource Health Unhealthy Alert State",
              "description": "State of the Resource Health Unhealthy alert"
            }
          },
          "SvcHlthAdvisoryAlertState": {
            "type": "string",
            "defaultValue": "true",
            "metadata": {
              "displayName": "Service Health Advisory Alert State",
              "description": "State of the Service Health Advisory alert"
            }
          },
          "SvcHlthIncidentAlertState": {
            "type": "string",
            "defaultValue": "true",
            "metadata": {
              "displayName": "Service Health Incident Alert State",
              "description": "State of the Service Health Incident alert"
            }
          },
          "SvcHlthMaintenanceAlertState": {
            "type": "string",
            "defaultValue": "true",
            "metadata": {
              "displayName": "Service Health Maintenance Alert State",
              "description": "State of the Service Health Maintenance alert"
            }
          },
          "svcHlthSecAdvisoryAlertState": {
            "type": "string",
            "defaultValue": "true",
            "metadata": {
              "displayName": "Service Health Security Advisory Alert State",
              "description": "State of the Service Health Security Advisory alert"
            }
          },
          "ALZMonitorActionGroupEmail": {
            "type": "string",
            "defaultValue": "action@mail.com",
            "metadata": {
              "displayName": "Action Group Email",
              "description": "Email address to send alerts to"
            }
          },
          "MonitorDisable": {
            "type": "string",
            "defaultValue": "MonitorDisable",
            "metadata": {
              "displayName": "Monitor Disable",
              "description": "Disable the Monitor"
            }
          }
        },
        "policyDefinitions": [
          {
            "policyDefinitionReferenceId": "ALZ_ResHlthUnhealthy",
            "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_ResourceHealth_Unhealthy_Alert')]",
            "parameters": {
              "enabled": {
                "value": "[[parameters('ResHlthUnhealthyAlertState')]"
              },
              "alertResourceGroupName": {
                "value": "[[parameters('ALZMonitorResourceGroupName')]"
              },
              "alertResourceGroupTags": {
                "value": "[[parameters('ALZMonitorResourceGroupTags')]"
              },
              "alertResourceGroupLocation": {
                "value": "[[parameters('ALZMonitorResourceGroupLocation')]"
              }
            }
          },
          {
            "policyDefinitionReferenceId": "ALZ_SvcHlthAdvisory",
            "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_ServiceHealth_HealthAdvisory')]",
            "parameters": {
              "enabled": {
                "value": "[[parameters('SvcHlthAdvisoryAlertState')]"
              },
              "alertResourceGroupName": {
                "value": "[[parameters('ALZMonitorResourceGroupName')]"
              },
              "alertResourceGroupTags": {
                "value": "[[parameters('ALZMonitorResourceGroupTags')]"
              },
              "alertResourceGroupLocation": {
                "value": "[[parameters('ALZMonitorResourceGroupLocation')]"
              },
              "ALZMonitorActionGroupEmail": {
                "value": "[[parameters('ALZMonitorActionGroupEmail')]"
              }
            }
          },
          {
            "policyDefinitionReferenceId": "ALZ_SvcHlthIncident", 
            "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_ServiceHealth_Incident')]",
            "parameters": {
              "enabled": {
                "value": "[[parameters('SvcHlthIncidentAlertState')]"
              },
              "alertResourceGroupName": {
                "value": "[[parameters('ALZMonitorResourceGroupName')]"
              },
              "alertResourceGroupTags": {
                "value": "[[parameters('ALZMonitorResourceGroupTags')]"
              },
              "alertResourceGroupLocation": {
                "value": "[[parameters('ALZMonitorResourceGroupLocation')]"
              },
              "ALZMonitorActionGroupEmail": {
                "value": "[[parameters('ALZMonitorActionGroupEmail')]"
              }
            }
          },
          {
            "policyDefinitionReferenceId": "ALZ_SvcHlthMaintenance",
            "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_ServiceHealth_Maintenance')]",
            "parameters": {
              "enabled": {
                "value": "[[parameters('SvcHlthMaintenanceAlertState')]"
              },
              "alertResourceGroupName": {
                "value": "[[parameters('ALZMonitorResourceGroupName')]"
              },
              "alertResourceGroupTags": {
                "value": "[[parameters('ALZMonitorResourceGroupTags')]"
              },
              "alertResourceGroupLocation": {
                "value": "[[parameters('ALZMonitorResourceGroupLocation')]"
              },
              "ALZMonitorActionGroupEmail": {
                "value": "[[parameters('ALZMonitorActionGroupEmail')]"
              }
            }
          },
          {
            "policyDefinitionReferenceId": "ALZ_svcHlthSecAdvisory",
            "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_ServiceHealth_SecurityAdvisory')]",
            "parameters": {
              "enabled": {
                "value": "[[parameters('svcHlthSecAdvisoryAlertState')]"
              },
              "alertResourceGroupName": {
                "value": "[[parameters('ALZMonitorResourceGroupName')]"
              },
              "alertResourceGroupTags": {
                "value": "[[parameters('ALZMonitorResourceGroupTags')]"
              },
              "alertResourceGroupLocation": {
                "value": "[[parameters('ALZMonitorResourceGroupLocation')]"
              },
              "ALZMonitorActionGroupEmail": {
                "value": "[[parameters('ALZMonitorActionGroupEmail')]"
              }
            }
          },
          {
            "policyDefinitionReferenceId": "ALZ_AlertProcessing_Rule",
            "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_AlertProcessing_Rule')]",
            "parameters": {
              "ALZMonitorResourceGroupName": {
                "value": "[[parameters('ALZMonitorResourceGroupName')]"
              },
              "ALZMonitorResourceGroupTags": {
                "value": "[[parameters('ALZMonitorResourceGroupTags')]"
              },
              "ALZMonitorResourceGroupLocation": {
                "value": "[[parameters('ALZMonitorResourceGroupLocation')]"
              },
              "ALZMonitorActionGroupEmail": {
                "value": "[[parameters('ALZMonitorActionGroupEmail')]"
              },
              "MonitorDisable": {
                "value": "[[parameters('MonitorDisable')]"
              }
            }
          }
        ],
        "policyType": "Custom"
      }
    },
    {
      "condition": "[not(parameters('parTelemetryOptOut'))]",
      "type": "Microsoft.Resources/deployments",
      "apiVersion": "2020-10-01",
      "name": "[format('pid-{0}-{1}', variables('varCuaid'), uniqueString(deployment().location))]",
      "location": "[deployment().location]",
      "properties": {
        "expressionEvaluationOptions": {
          "scope": "inner"
        },
        "mode": "Incremental",
        "parameters": {},
        "template": {
          "$schema": "https://schema.management.azure.com/schemas/2019-08-01/managementGroupDeploymentTemplate.json#",
          "contentVersion": "1.0.0.0",
          "resources": []
        }
      }
    }
  ]
}