PayAsYouGo to CSP Model Migration

[ShimKwan]

Hi,

We are planning to migrate from a "pay as you go" to a CSP subscription model (for our Azure Tenant/Subscription).

We currently have Sentinel and AIP sharing the same log analytics workspace.

AIP is configured in both on-prem and Azure Cloud.

Sentinel is connected to about 8 different source systems.

During the migration, will we have to recreate the Sentinel and AIP log analytics workspaces as separate workspaces? Or can we simply migrate the single workspace across?

What about all the AIP protected & encrypted data - will that be impacted in any way during this migration? Will people be able to access everything seamlessly after the migration?

Thank you,

SK

[#2]

You will be able to move the resource groups / Resources to the new subscription as long as they are within the same directory/tenant everything should be fine. The AIP workspace doesnt hold the encryption keys, this is linked to your tenant so as long as you're not moving to a new tenant/AAD instance that won't cause an issue. Of course testing this before the move would help :)

https://docs.microsoft.com/en-us/azure/azure-monitor/logs/move-workspace