Skip to content

Commit 780f9d0

Browse files
authored
Update event-overview.md
1 parent eebf14f commit 780f9d0

File tree

1 file changed

+36
-5
lines changed

1 file changed

+36
-5
lines changed

articles/governance/policy/concepts/event-overview.md

Lines changed: 36 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -17,17 +17,48 @@ Critically, you only pay for what you use.
1717

1818
Azure Policy events are sent to the Azure Event Grid, which provides reliable delivery services to
1919
your applications through rich retry policies and dead-letter delivery. To learn more, see
20-
[Event Grid message delivery and retry](../../../event-grid/delivery-and-retry.md).
21-
22-
The common Azure Policy event scenario is tracking when the compliance state of a resource changes
23-
during policy evaluation. Event-based architecture is an efficient way to react to these changes
24-
instead of scanning the compliance state of resources on a fixed schedule.
20+
[Event Grid message delivery and retry](../../../event-grid/delivery-and-retry.md). Event Grid takes
21+
care of the proper routing, filtering, and multicasting of the events to destinations via Event Grid Subscriptions.
2522

2623
> [!NOTE]
2724
> Azure Policy state change events are sent to Event Grid after an
2825
> [evaluation trigger](../how-to/get-compliance-data.md#evaluation-triggers) finishes resource
2926
> evaluation.
3027
28+
There are two primary entities using Event Grid:
29+
- Events: These can be anything a user may want to react to – includes if a policy compliance state is
30+
created, changed, and deleted of a resource such as a VM or a file in storage.
31+
- Event Grid Subscriptions: These are user configured entities that direct the proper set of events
32+
from a publisher to a subscriber. Subscriptions can filter events based on the resource path the event
33+
originated from as well as the type of event.
34+
> Can choose scope: Azure subscription and Management group
35+
36+
The common Azure Policy event scenario is tracking when the compliance state of a resource changes
37+
during policy evaluation. Event-based architecture is an efficient way to react to these changes
38+
instead of scanning the compliance state of resources on a fixed schedule.
39+
40+
Another scenario is to automatically trigger remediation tasks without manually ticking off 'create
41+
remediation task' on the policy portal page. Event Grid checks for compliance state and resources that are currently
42+
non-compliant can be remedied. Learn more about [remediation structure](../concepts/remediation-structure.md).
43+
> Remediation requires a managed identity and policies must be in Modify or DeployIfNotExists effect. [Learn more about
44+
effect types](../concepts/effects.md).
45+
46+
The last scenario to consider is to use event grid as an audit system to enforce configurations to
47+
store state changes. This can be helpful to understand to check reason for non-compliancy over time.
48+
49+
## Event Grid Benefits
50+
Event Grid has a few benefits for customers and services in the Azure ecosystem:
51+
- Automation: Event Grid provides an automated way to trigger tasks and alerts based on compliance events
52+
- Latency: Event Grid aims to deliver policy events with sub-second latency meaning services and user
53+
applications can react to policy compliance events in real-time.
54+
- Durable delivery: Each message is promptly delivered by Event Grid with a 30 second default delay and
55+
least once for each matching subscription. Event Grid retries transmission of an event if a subscriber's endpoint
56+
fails to acknowledge receipt of it or if it doesn't, according to a predetermined retry schedule and retry policy.
57+
- Custom event producer: Event producers and consumers need not be Azure or Microsoft services. Leveraging Azure
58+
Policy Event Grid, a change in a resource tag can trigger an Azure Function or the creation of a new storage blob
59+
can trigger custom commands through service bus, or the control messaging on who responds to the state change.
60+
> Any 3rd party service can onboard Policy Event Grid as a publisher of events or can consumer events be pushed to Event grid.
61+
3162
See
3263
[Route policy state change events to Event Grid with Azure CLI](../tutorials/route-state-change-events.md)
3364
for a full tutorial.

0 commit comments

Comments
 (0)