output/20260723_081532/govviz/ALZ_20260723_081601/Enterprise-Scale/src/resources/Microsoft.Authorization/policySetDefinitions/DenyAction-DeleteProtection.json

{
    "name": "DenyAction-DeleteProtection",
    "type": "Microsoft.Authorization/policySetDefinitions",
    "apiVersion": "2021-06-01",
    "scope": null,
    "properties": {
        "policyType": "Custom",
        "displayName": "DenyAction Delete - Activity Log Settings and Diagnostic Settings",
        "description": "Enforces DenyAction - Delete on Activity Log Settings and Diagnostic Settings.",
        "metadata": {
            "version": "1.1.0",
            "category": "Monitoring",
            "source": "https://github.com/Azure/Enterprise-Scale/",
            "alzCloudEnvironments": [
                "AzureCloud",
                "AzureChinaCloud",
                "AzureUSGovernment"
            ]
        },
        "parameters": {},
        "policyDefinitions": [
            {
                "policyDefinitionReferenceId": "DenyActionDelete-DiagnosticSettings",
                "policyDefinitionId": "/providers/Microsoft.Management/managementGroups/contoso/providers/Microsoft.Authorization/policyDefinitions/DenyAction-DiagnosticLogs",
                "definitionVersion": "1.*.*",
                "parameters": {},
                "groupNames": []
            },
            {
                "policyDefinitionReferenceId": "DenyActionDelete-ActivityLogSettings",
                "policyDefinitionId": "/providers/Microsoft.Management/managementGroups/contoso/providers/Microsoft.Authorization/policyDefinitions/DenyAction-ActivityLogs",
                "definitionVersion": "1.*.*",
                "parameters": {},
                "groupNames": []
            }
        ],
        "policyDefinitionGroups": null
    }
}