[AVM Module Issue]: operations-management /solution

[janinternet]

Check for previous/existing GitHub issues

• I have checked for previous/existing GitHub issues

Issue Type?

Feature Request

Module Name

avm/res/operations-management/solution

(Optional) Module Version

No response

Description

We need to have the option to unable UEBA for Sentinel. Like this:

resource enable_euba 'Microsoft.SecurityInsights/settings@2024-01-01-preview' = {
name: 'EntityAnalytics'
scope: sentinel_workspace
kind: 'EntityAnalytics'
properties: {
entityProviders: ['ActiveDirectory','AzureActiveDirectory']
}

}

resource euba_setting 'Microsoft.SecurityInsights/settings@2024-01-01-preview' = {
name: 'Ueba'
scope: sentinel_workspace
kind: 'Ueba'
properties: {
dataSources: [
'AuditLogs'
'AzureActivity'
'SecurityEvent'
'SigninLogs']
}
dependsOn: [enable_euba]
}

https://learn.microsoft.com/en-us/answers/questions/1833689/how-to-enable-euba-via-bicep-arm-template

(Optional) Correlation Id

No response

[microsoft-github-policy-service]

Important

The "Needs: Triage 🔍" label must be removed once the triage process is complete!

Tip

For additional guidance on how to triage this issue/PR, see the BRM Issue Triage documentation.

[avm-organizer]

@janinternet, thanks for submitting this issue for the avm/res/operations-management/solution module!

Important

A member of the @Azure/avm-res-operationsmanagement-solution-module-owners-bicep team will review it soon!

[krbar]

@janinternet Thanks for reporting, I will look into it.