Monitoring guidance
Add more guidance for users that want to use centralised monitoring. https://docs.microsoft.com/en-us/azure/azure-monitor/essentials/diagnostic-settings-policy
"For sending logs to a centralised workspace, use Azure Policy to configure AKS DiagnosticSettings instead"

I think it would be good to have both options - specify at deploy time and/or policy. Also be nice to set the ingestion limits (if deploying a discrete LAW) especially for Dev/Test.
@liamfoneill agreed. However if the workspace was in a different subscription then that might cause a few complications with the bicep.
Issue smells stale, no activity for 30 days. Stale Label will be removed if the issue is updated, otherwise closed in a month.