Azure AI Foundry Diagnostic Logging with Terraform: Every AI Call Tracked for Compliance 📋

Azure doesn't send AI diagnostic logs anywhere by default. One Terraform resource changes that - azurerm_monitor_diagnostic_setting routes audit logs, request/response data, and metrics to Log Analytics and Storage. You've deployed your Azure AI Foundry endpoint ( Post 1 ) and added content safety policies ( Post 2 ). Your models are serving responses in production. Then your compliance team asks: "Can you prove who called which model, when, and how long each request took?" Azure AI services emit three categories of diagnostic logs - Audit, RequestResponse, and Trace. But they don't go anywhere by default. Without a diagnostic setting, every API call vanishes into the void. One Terraform resource fixes this: azurerm_monitor_diagnostic_setting routes those logs to Log Analytics for real-time queries and Storage for long-term compliance retention. 🎯 🧱 What Gets Logged Azure Cognitive Services (the resource backing AI Foundry) emits three log categories: Category What It Captures Complian