Merge pull request #75564 from watfordsuzy/patch-3

Update audit-logs.md

Author: ktoliver

articles/attestation/audit-logs.md

@@ -60,7 +60,76 @@ For each of these events, Azure Attestation collects the following information:
 Audit logs are provided in JSON format. Here is an example of what an audit log may look like.
 
 ```json
-{"operationName":"SetCurrentPolicy","resultType":"Success","resultDescription":null,"auditEventCategory":["ApplicationManagement"],"nCloud":null,"requestId":null,"callerIpAddress":null,"callerDisplayName":null,"callerIdentities":[{"callerIdentityType":"ObjectID","callerIdentity":"<some object ID>"},{"callerIdentityType":"TenantId","callerIdentity":"<some tenant ID>"}],"targetResources":[{"targetResourceType":"Environment","targetResourceName":"PublicCloud"},{"targetResourceType":"ServiceRegion","targetResourceName":"EastUS2"},{"targetResourceType":"ServiceRole","targetResourceName":"AttestationRpType"},{"targetResourceType":"ServiceRoleInstance","targetResourceName":"<some service role instance>"},{"targetResourceType":"ResourceId","targetResourceName":"/subscriptions/<some subscription ID>/resourceGroups/<some resource group name>/providers/Microsoft.Attestation/attestationProviders/<some instance name>"},{"targetResourceType":"ResourceRegion","targetResourceName":"EastUS2"}],"ifxAuditFormat":"Json","env_ver":"2.1","env_name":"#Ifx.AuditSchema","env_time":"2020-11-23T18:23:29.9427158Z","env_epoch":"MKZ6G","env_seqNum":1277,"env_popSample":0.0,"env_iKey":null,"env_flags":257,"env_cv":"##00000000-0000-0000-0000-000000000000_00000000-0000-0000-0000-000000000000_00000000-0000-0000-0000-000000000000","env_os":null,"env_osVer":null,"env_appId":null,"env_appVer":null,"env_cloud_ver":"1.0","env_cloud_name":null,"env_cloud_role":null,"env_cloud_roleVer":null,"env_cloud_roleInstance":null,"env_cloud_environment":null,"env_cloud_location":null,"env_cloud_deploymentUnit":null}
+{
+    "operationName": "SetCurrentPolicy",
+    "resultType": "Success",
+    "resultDescription": null,
+    "auditEventCategory": [
+        "ApplicationManagement"
+    ],
+    "nCloud": null,
+    "requestId": null,
+    "callerIpAddress": null,
+    "callerDisplayName": null,
+    "callerIdentities": [
+        {
+            "callerIdentityType": "ObjectID",
+            "callerIdentity": "<some object ID>"
+        },
+        {
+            "callerIdentityType": "TenantId",
+            "callerIdentity": "<some tenant ID>"
+        }
+    ],
+    "targetResources": [
+        {
+            "targetResourceType": "Environment",
+            "targetResourceName": "PublicCloud"
+        },
+        {
+            "targetResourceType": "ServiceRegion",
+            "targetResourceName": "EastUS2"
+        },
+        {
+            "targetResourceType": "ServiceRole",
+            "targetResourceName": "AttestationRpType"
+        },
+        {
+            "targetResourceType": "ServiceRoleInstance",
+            "targetResourceName": "<some service role instance>"
+        },
+        {
+            "targetResourceType": "ResourceId",
+            "targetResourceName": "/subscriptions/<some subscription ID>/resourceGroups/<some resource group name>/providers/Microsoft.Attestation/attestationProviders/<some instance name>"
+        },
+        {
+            "targetResourceType": "ResourceRegion",
+            "targetResourceName": "EastUS2"
+        }
+    ],
+    "ifxAuditFormat": "Json",
+    "env_ver": "2.1",
+    "env_name": "#Ifx.AuditSchema",
+    "env_time": "2020-11-23T18:23:29.9427158Z",
+    "env_epoch": "MKZ6G",
+    "env_seqNum": 1277,
+    "env_popSample": 0.0,
+    "env_iKey": null,
+    "env_flags": 257,
+    "env_cv": "##00000000-0000-0000-0000-000000000000_00000000-0000-0000-0000-000000000000_00000000-0000-0000-0000-000000000000",
+    "env_os": null,
+    "env_osVer": null,
+    "env_appId": null,
+    "env_appVer": null,
+    "env_cloud_ver": "1.0",
+    "env_cloud_name": null,
+    "env_cloud_role": null,
+    "env_cloud_roleVer": null,
+    "env_cloud_roleInstance": null,
+    "env_cloud_environment": null,
+    "env_cloud_location": null,
+    "env_cloud_deploymentUnit": null
+}
 ```
 
 ## Access Audit Logs