Baking diagnostic logging into the landing zone templates

Every Azure service has a very consistent method of collecting diagnostic logs. If you go to the Azure portal and go to the landing page of any Azure service, you will see a pane on the left side of the landing page, also called the Resource Menu. Under the Monitoring section, you will see a menu option called Diagnostic Settings, as shown in Figure 11.3. The working pane of this menu option allows users to set up diagnostics for this service.

There are different categories of diagnostics and logs in Azure. The Azure cloud service is divided into the management plane or the control plane and the data plane. The role of the control plane is to create and manage the resource (create, update, delete). The data plane is used to interact with the resource (read, write, execute). For example, if I am creating a storage account, the creation process is done via the control plane using the Azure Resource Manager to create the storage...