In this blogpost I will be covering how to set the Security Center pricing per resource type.
Security Center has three different pricings per resource type, which can be found under Security policy > Settings > Pricing tier.
This setting enables or disables the protection of VM’s, SQL Servers and App Services and can be configured per resource type. If you want to leverage automation capabilities and manage Security Center at scale, you can either work with the Security Center API or you leverage an ARM template, as mentioned in my previous blogpost.
Due to the nature of how we are configuring the pricing setting per resource, you need to be aware of a locking mechanism we use to avoid conflicts in a so-called “racing condition”. To make sure that the template is being applied successfully, I’m using an ARM template element called dependsOn. This will prevent that ARM generates an error during the deployment saying that another deployment is already in progress.
In the above example you can also notice that I’m using parameters. This allows you to set the pricing independently per resource type. Please be aware that the expected pricingTier values (Standard, Free) are case sensitive.
The ARM template can be found here.