Add warning message for Service Health alerts configuration and update condition for built-in policy assignment

Author: jtracey93

eslzArm/eslz-portal.json

@@ -1005,6 +1005,16 @@
                             },
                             "visible": true
                         },
+                        {
+                            "name": "multipleServiceHealthWarning",
+                            "type": "Microsoft.Common.InfoBox",
+                            "visible": true,
+                            "options": {
+                                "text": "There are 2 ways to enable Service Health alerts via Azure Policy in ALZ. One is via the built-in policy (recommended) and the other is via Azure Monitor Baseline Alerts (AMBA). Both are valid and achieve the same outcome of enabling Service Health on all Azure Subscriptions in-scope of the policy assignment at the intermediate root Management Group, e.g. Contoso. You should pick only one way to enable Service Health alerts and not both. We recommend using the built-in policy as it is simpler to use and does not require any additional configuration. To deploy via AMBA you must select 'No' to the built-in policy, above, and 'Yes' in the AMBA section below.",
+                                "uri": "https://learn.microsoft.com/azure/service-health/service-health-alert-deploy-policy",
+                                "style": "Warning"
+                            }
+                        },
                         {
                             "name": "esAmbaTitle",
                             "type": "Microsoft.Common.Section",
@@ -1052,7 +1062,7 @@
                                     }
                                 ]
                             },
-                            "visible": true
+                            "visible": "[equals(steps('monitor').enableServiceHealthBuiltIn, 'No')]"
                         },
                         {
                             "name": "enableMonitorBaselines",

eslzArm/eslzArm.json

@@ -2888,7 +2888,7 @@
         },
         {
             // Assigning Service Health built-in policy to intermediate root management group if condition is true
-            "condition": "[and(or(not(empty(parameters('singlePlatformSubscriptionId'))), not(empty(parameters('managementSubscriptionId')))), equals(parameters('enableServiceHealthBuiltIn'), 'Yes'))]",
+            "condition": "[and(or(not(empty(parameters('singlePlatformSubscriptionId'))), not(empty(parameters('managementSubscriptionId')))), equals(parameters('enableServiceHealthBuiltIn'), 'Yes'), equals(parameters('enableServiceHealth'), 'No'))]",
             "type": "Microsoft.Resources/deployments",
             "apiVersion": "2020-10-01",
             "name": "[variables('deploymentNames').monitorServiceHealthBuiltInDeploymentName]",