In February 2020, we introduced Azure Resource Manager (ARM) policy support for network security group (NSG) Flow Logs. To further simplify the deployment experience for NSG Flow Logs customers, we now have built-in policy support for NSG Flow Logs.
We are launching two built-in policies for deploying NSG Flow Logs
- An Audit policy: Flag NSGs without Flow logs enabled
- A DeployIfNotExists policy: Enable Flow logs on NSGs where it is disabled
Get started with our tutorial for using the above policies.