Azure / SimuLand

Understand adversary tradecraft and improve detection strategies
MIT License
694 stars 79 forks source link

AAD diagnostic setting build failure #20

Closed jorlamd closed 2 years ago

jorlamd commented 2 years ago

Hi!

Getting this error while trying to deploy the template, azureSentinel2Go succeeds and all else seems to build normally. Wondering if you had encountered it before and what I may be missing, google is not cooperating too much on this one!

AADConnector-7bolxxjg3amwg
microsoft.aadiam/diagnosticSettings
NotFound
Operation details

{
    "status": "Failed",
    "error": {
        "code": "OperationNotFound",
        "message": "Path: '/subscriptions/.../resourcegroups/azhybrid/providers/microsoft.aadiam/diagnosticSettings/AADConnector-7bolxxjg3amwg' is not supported"
    }
}
jorlamd commented 2 years ago

Never mind, was attempting to deploy at resource group level with resources at tenant level. using az deploy tenant (as specified in the instructions) works well.

Cyb3rWard0g commented 2 years ago

Thank you for the update @jorlamd ! Happy to hear the instructions helped! Thank you for testing the project.