An international company hosts application workloads in Azure across two regions: East US and North Europe. The company's compliance policy dictates that all log data must remain within the region where it was generated. You need to design a monitoring and log routing solution that automatically configures diagnostic logging for newly deployed resources, complies with regional data residency, and minimizes administrative overhead for user access management. Which of the following configurations should you include in the design? (Select TWO.)
- Deploy a separate Log Analytics workspace in East US and another in North Europe to store logs generated within each respective region.Cevap
- Create Azure Policy assignments with the DeployIfNotExists effect to automatically configure diagnostic settings for new resources to route to the regional workspaces.Cevap
- CDeploy a single centralized Log Analytics workspace in East US and route logs from both regions to it.
- DCreate Azure Policy assignments with the Deny effect to block the deployment of resources that do not have diagnostic settings configured.
- EAssign the Monitoring Reader role directly to individual user accounts of the monitoring team.
Cevap
Deploy a separate Log Analytics workspace in East US and another in North Europe, and create Azure Policy assignments with the DeployIfNotExists effect.
Deploying regional Log Analytics workspaces ensures compliance with regional data residency constraints. Using Azure Policy with the DeployIfNotExists effect ensures that new resources automatically have diagnostic logging configured without manual intervention or deployment failures.
Adım Adım Çözüm
Anahtar Kavram
Designing regional log storage compliance and automated log routing configuration using Azure Policy.