Support for Security Center export to Log Analytics Workspace

[sebastus]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

Export Security Center events to Log Analytics workspace.

New or Affected Resource(s)

• azurerm_security_center_export (new)

References

• https://docs.microsoft.com/en-us/rest/api/securitycenter/automations
• Support for Security Center Event Hub export #6066

[benc-uk]

Should the resource be called azurerm_security_center_automation as at the Azure API level that what it is referred to?
The portal and docs call the features of this API two different things, but there is a single API

• If the automation action is a LogicApp, then that is referred to as "workflow automation" https://aka.ms/ASCWorkflowAutomationLearnMore
• If the automation action is a Event Hub or Log Analytics, then that is referred to as "continuous export" https://aka.ms/ASCExportLearnMore

This is outlined in the API docs https://docs.microsoft.com/en-us/rest/api/securitycenter/automations/createorupdate#definitions but nowhere else as far as I can see

This is a question of having Terraform align with terminology that users will see in the portal or the docs, or align to the underlying Azure APIs

[ghost]

This has been released in version 2.37.0 of the provider. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading. As an example:

provider "azurerm" {
    version = "~> 2.37.0"
}
# ... other configuration ...

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. If you feel I made an error 🤖 🙉 , please reach out to my human friends 👉 [email protected]. Thanks!