Azure Firewall - Policy to deploy diagnostic settings for Firewall to Log Analytics workspace - missing 'Azure Firewall Flow Trace Log' category

[chrholt]

Versions

Module: ALZ v2.4.1
terraform-azurerm-caf-enterprise-scale/blob/main/modules/archetypes/lib/policy_definitions/policy_definition_es_deploy_diagnostics_firewall.json

Description

There is missing a category for Azure Firewall diagnostic settings policy. The missing category is Azure Firewall Flow Trace Log

This category needs to be added or replace all with category group allLogs. The Azure Firewall resources which this policy deploys diagnostics settings to will never be compliant due to a mismatch between existenceCondition and what the policy actually deploys.

Screenshots

[jtracey93]

Working on adding this new category in PR #1119 hopefully will be merged here later today