Question
You need to design an architecture to capture the creation of users and the assignment of roles. The captured data must be stored in Azure Cosmos DB.
Which services should you include in the design? To answer, drag the appropriate services to the correct targets. Each service may be used once, more than once, or not at all.
**Data Flow:**
Azure Active Directory audit log
↓
[Drop Zone 1]
↓
[Drop Zone 2]
↓
Cosmos DB
Explanation
Microsoft Entra ID (Azure Active Directory) audit logs, which record user creation and role assignments, can be streamed to Azure Event Hubs through the tenant's diagnostic settings. An Azure Functions app with an Event Hubs trigger then reads those events and writes them to Azure Cosmos DB (for example, through the Cosmos DB output binding). Event Grid, Monitor Logs and Notification Hubs do not provide this ingest-then-store path to Cosmos DB.
