Jack Tracey

Thanks @jonathan-vella with the release of the IP Connect feature this is now more applicable https://docs.microsoft.com/en-us/azure/bastion/connect-ip-address

Trigger ADO Sync 1

Trigger ADO Sync 2

Thanks @jonathan-vella. What do they do around the additional RBAC requirements as documented here: https://learn.microsoft.com/en-gb/azure/cloud-adoption-framework/ready/azure-best-practices/plan-for-virtual-machine-remote-access

For the AAD Logs we will need to cater for the AAD Premium license requirement: 

I have just authored an ARM template for this and will place here for everyone's benefit: ```arm { "$schema": "https://schema.management.azure.com/schemas/2019-08-01/tenantDeploymentTemplate.json#", "contentVersion": "1.0.0.0", "parameters": { "lawResourceId": { "type": "string", "metadata": {...

Hey @chrisking81, This Bicep file can be used to enable it on each MG to an LAW **Main Module (orchestration - deploy this)** ```bicep targetScope = 'tenant' param parMgIdName string...

@krowlandson, @jfaurskov, @matt-FFFFFF - do we agree we should bootstrap this in all RIs - even though it cant be policied

@matt-FFFFFF I added to all ADO iteration paths last night and we are planning the work for Bicep in Septembers sprint which @lachaves is picking up for us. So may...

Trigger ADO Sync 1