AzureFeeds

Resiliency is a key focus for Microsoft in making sure our customers experience minimal impact due to planned or unexpected outages that may occur. Up until now there has been no native scalable solution to provide consistent notifications across Azure subscriptions for Service Health events.

Building on the success of Azure Monitor Baseline Alerts (AMBA) where this functionality is currently available, the AMBA team has combined with the Service Health Product team to include this capability into the Azure native experience. We’re excited to announce the release of Azure Service Health Built-In Policy (Preview), a new built-in Azure Policy designed to simplify and scale the deployment of Service Health alerts across your Azure environment. This policy enables customers to automatically deploy Service Health alerts across subscriptions, ensuring consistent visibility into platform-level issues that may impact workloads. Existing subscriptions can be remediated in bulk and new Azure subscriptions, created once the Policy has been assigned, will automatically be configured for receiving Service Health alerts.

🔍 What’s the purpose of this announcement?

• It addresses situations where customers only permit the use of built-in policies.


• It automates the setup of Service Health alerts across all subscriptions when deployed at the management group level.


• It ensures consistent alert coverage for platform events.


• It helps reduce manual setup and ongoing maintenance.

🛠️ What options are available with the Policy?

All the learnings from AMBA have been taken into consideration in designing and creating this policy. There are now a wide range of options available to provide flexibility based on your needs. These options are surfaced as parameters within the policy:

• It audits the existing environment for compliance.


• It ensures the ability to provide custom alert rules that align with the naming standards.


• It gives the ability to choose the types of Service Health events to monitor.


• It supports Bring-your-own Action Group, or the ability to create a new Action Group as part of the Policy assignment.


• For ARM role notification, it ensures the ability to choose from a pre-set list of built-in roles for notifications.


• It provides the ability to choose from email, Logic App, Event Hubs, webhook, and Azure Functions within the Action Group.


• It enables naming Resource groups, and location flexibility.


• It gives the ability to add Resource tags.

🧩 What about Azure Monitor Baseline Alerts?

The AMBA team have been working to incorporate the newly built-in policy into a future release. The team plans to roll this out in the next few weeks along with details for existing customers on replacing the existing AMBA custom policy. These changes will then be consumed into Azure Landing Zones.

AMBA continues to offer a wide range of alerts for both platform and workload services in addition to Service Health alerts. This announcement does not serve as a replacement for AMBA but simply compliments the AMBA solution.

📣 What’s Next?

Check out the guidance on leveraging this policy in your environment Deploy Service Health alert rules at scale using Azure Policy – Azure Service Health

Should you require support for this policy please raise a support ticket via the portal as comments raised below may not be addressed in a timely manner