azurerm_monitor_log_profiles resource

[edit on GitHub]

Use the azurerm_monitor_log_profiles InSpec audit resource to verify that a Log Profile exists.

Azure REST API version

This resource interacts with version 2016-03-01 of the Azure Management API. For more information see the official Azure documentation.

At the moment, there doesn’t appear to be a way to select the version of the Azure API docs. If you notice a newer version being referenced in the official documentation please open an issue or submit a pull request using the updated version.

Availability

Installation

This resource is available in the inspec-azure resourcepack. To use it, add the following to your inspec.yml in your top-level profile:

depends:
  - name: inspec-azure
    git: https://github.com/inspec/inspec-azure.git

You’ll also need to setup your Azure credentials; see the resource pack README.

Syntax

An azurerm_monitor_log_profiles resource block identifies a Log Profile by name.

describe azurerm_monitor_log_profiles do
  ...
end

Examples

Test that an example resource has a Log Profile

describe azurerm_monitor_log_profiles do
  its('names') { should include('ExampleProfile') }
end

Attributes

• names

names

The name of the Log Profile

its('names') { should include('ExampleProfile') }

Matchers

This InSpec audit resource has the following special matchers. For a full list of available matchers, please visit our Universal Matchers page.

exists

The control will pass if the resource returns a result. Use should_not if you expect zero matches.

# If we expect 'ExampleProfile' to exist
describe azurerm_monitor_log_profiles do
  its('names') { should include('ExampleProfile') }
end

# If we expect 'ExampleProfile' to not exist
describe azurerm_monitor_log_profiles do
  its('names') { should_not include('ExampleProfile') }
end

Azure Permissions

Your ServicePrincipal must be setup with a contributor role on the subscription you wish to test.