[DTOSS-11202] Add Application Insights with Azure Monitor Private Link Scope integration

[josielsouzanordcloud]

Description

Adds comprehensive monitoring infrastructure with Application Insights and secure connectivity through Azure Monitor Private Link Scope (AMPLS) for the breast screening application.

Changes:

• Add Application Insights module for web application telemetry and performance monitoring
• Configure private link scoped service for Log Analytics Workspace
• Configure private link scoped service for Application Insights
• Integrate monitoring services with existing hub-based private endpoint architecture
• Enable secure data ingestion through AMPLS to prevent data exfiltration

Infrastructure components added:

• app_insights_audit - Application Insights instance configured for web applications
• private_link_scoped_service_law - Private link scope for Log Analytics Workspace
• private_link_scoped_service_app_insights - Private link scope for Application Insights

Security benefits:

• Monitoring data flows through private endpoints only
• Prevents data exfiltration to public monitoring endpoints
• Maintains compliance with NHS Digital security requirements
• Integrates with existing hub network architecture

Jira link

[Link to related Jira ticket]

Review notes

• Hub integration: Uses existing hub provider configuration for private link resources
• Naming convention: Follows established patterns using shared_config module
• Resource placement: Private link scoped services created in hub resource group as per architecture
• Dependencies: Application Insights depends on Log Analytics Workspace for data retention
• Monitoring scope: Configured for web application type to capture appropriate telemetry
• Network security: Both monitoring services added to AMPLS scope for secure data ingestion

Post-deployment steps:

• Configure application code to use Application Insights connection string
• Verify data flow through private endpoints