Azure Weekly Updates - June 10th, 2024

Audit logging in Azure API Management developer portal

AVAILABILITY: NOW AVAILABLE

We are excited to announce that audit logging for user actions in the Azure API Management developer portal is now generally available. API administrators and managers can now enable a diagnostic setting in Azure API Management to send developer portal audit logs to a storage account, event hub, or Log Analytics workspace.

Developer portal audit logs include:

• User authentication actions: Sign-in and sign-out activities.
• Views of API details: Access to API details, API operation details, and products.
• API testing: Actions taken in the interactive test console.

This new feature enhances the ability to monitor and audit user activities within the developer portal, providing better security and compliance management.

For more information you can click here.

Log search alert rules using linked storage will require using a managed identity staring July 2024

As of today, when defining a log search alert rule with linked storage, it is not required to explicitly grant permissions to the storage account itself.

Starting July 2024, alert rules using linked storage will require a managed identity to access the linked storage. This requirement will be enforced on alert rules created with API version 2023-12-01 or newer. Creating or updating linked storage rules using an older API version will be blocked.

This change will be rolled out in two phases:

1. July 2024 –log search alert rules requiring linked storage will be blocked for updates using API versions older than 2023-12-01. Same applies for creation of new rules requiring linked storage. Use API version 2023-12-01 or newer to update your existing rules or create new rules to use workspace linked storage and define managed identity access.
2. September 2024 - all log search alert rules using linked storage that do not use a managed identity will break and stop evaluating.

For more information you can click here.

Azure Monitor log search alert rules in Resource Health

Azure Resource Health helps you diagnose and get support for service problems that affect your Azure resources. Azure Resource Health now supports log search alert rules, so that you can use the activity log to check the health status of your log search alert rules.

You can create a resource health alert for specific events to send alert an alert and notify you when a log search alert rulw is unhealthy.

Next steps:

• Monitor the health of log search alert rules - Azure Monitor | Microsoft Learn
• Azure Resource Health overview - Azure Service Health | Microsoft Learn
• Create an activity log, service health, or resource health alert rule - Azure Monitor | Microsoft Learn