3.9.0

Highlights

• Add opt-in proactive monitoring through a dedicated CertLC Action Group.
• Alert on poison-queue writes, Event Grid dead-lettered or dropped events, repeated delivery failures, failed Automation jobs, and stale certificate statistics.
• Send Queue Storage write diagnostics to the existing Log Analytics workspace for poison-message detection.
• Keep alert resources in a final-stage Bicep module so existing infrastructure dependencies remain acyclic.
• Document alert configuration, safe in-place enablement, and post-deployment verification.

Validation

• Root template and development parameters compiled successfully with Bicep 0.46.1.
• ARM validation succeeded against the live resource group.
• Live what-if reported exactly eight create-only changes with no modifications or deletions.
• Standalone alert deployment completed with zero failed root or nested operations.
• Verified the enabled Action Group receiver, all six enabled alert rules and Action Group links, and Queue StorageWrite diagnostics.