Skip to content

Governance Transforms Log Analytics

Joshua Davis edited this page Apr 6, 2026 · 2 revisions

Log Analytics

Automatic corrections for Log Analytics workspace ARM property placement

Domain: monitoring


Checks (1)

Check Description
TFM-LA-001 Move disableLocalAuth from inside features block to properties root

TFM-LA-001

Move disableLocalAuth from inside features block to properties root

Rationale: ARM silently drops disableLocalAuth if nested inside properties.features. The property must be a direct child of properties for Log Analytics workspaces.
Agents: terraform-agent, bicep-agent

Targets

  • Microsoft.OperationalInsights/workspaces

Type: Regex
Search: '(features\s*=\s*\{[^}]*?)(\s*disableLocalAuth\s*=\s*\w+\s*\n?)([^}]*\})'
Replace: '\1\3'


Home

Getting Started

Stages

Interfaces

Configuration

Agent System

Features

Quality

Help

Governance

Policies — Azure

AI Services

Compute

Data Services

Identity

Management

Messaging

Monitoring

Networking

Security

Storage

Web & App

Policies — Well-Architected

Reliability

Security

Cost Optimization

Operational Excellence

Performance Efficiency

Integration

Anti-Patterns
Standards

Application

IaC

Principles

Transforms

Clone this wiki locally