Send Azure KeyVault logs accross subscriptions

Félix B 1

Hello,

We would like to send the logs of all our Azure Key vaults to 1 Log analytics workspace.
So we created the Azure policies according to the documentation.
However, the policies are not compliant for the Key Vaults located in different subscriptions.

We tried to create a Management Group and put all the subscriptions in it. Then create a policy with the scope of the management group.
But we still have the same issue. The policy is only compliant for the Key Vaults in the same subscription as the log analytic workspace.

Any idea how we can achieve this ?

Thanks in advance!

Siva-kumar-selvaraj 15,546 Reputation points

2021-08-23T07:50:14.63+00:00

Thanks for reaching out.

I am looking at this one and testing few scenario on my lab, will update you with my findings meanwhile could you please share document that you referring to create Azure policies for keyvault? also adding right tag for this thread to get expertise from Azure Policy team.

Thanks.