...
security-dashboards
,security-log-analytics
,
- Azure Policy
Add resource activity and audit logs to perform self monitoring
Login to Azure
...
Once you have run the bootstrap script successfully, you will be able to see the /azure/<ENVIRONMENT>
folder generated
You will also be able to see the remote state called tfstate
created by visiting Storage accounts in the Azure Portal
If there is an error in running the bootstrap process and the outcome was unexpected, you will need to delete the environment directory in /azure
before running the bootstrap script again
...
During resource provisioning you will be asked for inputs at multiple stages inside a vi
editor. One of the example is below:
Read the instructions in the editor and to edit the values you can press i
and update the input values. Once you are satisfied with the input values, press Esc
to exit editor mode and :wq
(save and quit) the editor to continue with resource provisioning.
Once you have successfully run the update-environment
script, you will be able to verify that the following resource groups for remote-state, log-analytics & dashboards have been created in Azure Portal
Sentinel would also have been configured
In Sentinel, you will find our rules, workbooks and automation deployed. For more information about custom content, see XDR Content Management
If there is an error in running the update-environment
script and the outcome was unexpected, you will need to delete the Sentinel resource groups security-dashboards
and security-log-analytics
before running the script again
Update VCS
It is important to commit and push changes after running the update script, or after making any manual changes to code or configurations, within your organisation’s repository (i.e. infrastructure-live
).
...