Built-in Azure Policy support for NSG Flow Logs is now available
Network security group (NSG) Flow Logs can now be deployed and managed using built-in Azure policies. You don’t need to write your own policies to manage NSG Flow Log deployments.
Source: Microsoft Azure – aggiornamenti