sentinel-arm-dynamic-sku

"resources": [
    {
        "type": "microsoft.operationalinsights/workspaces",
        "apiVersion": "2021-06-01",
        "name": "[parameters('logAnalyticsName')]",
        "location": "[parameters('location')]",
        "properties": {
            "sku": "[variables('sku')]",
            "retentionInDays": "[parameters('retentionInDays')]",
            "workspaceCapping": {
                "dailyQuotaGb": -1
            },
            "publicNetworkAccessForIngestion": "Enabled",
            "publicNetworkAccessForQuery": "Enabled"
        }
    },
    {
        "type": "Microsoft.OperationsManagement/solutions",
        "apiVersion": "2015-11-01-preview",
        "name": "[variables('azureSentinelSolutionName')]",
        "location": "[parameters('location')]",
        "dependsOn": [
            "[resourceId('microsoft.operationalinsights/workspaces', parameters('logAnalyticsName'))]"
        ],
        "plan": {
            "name": "[variables('azureSentinelSolutionName')]",
            "promotionCode": "",
            "product": "OMSGallery/SecurityInsights",
            "publisher": "Microsoft"
        },
        "properties": {
            "workspaceResourceId": "[resourceId('microsoft.operationalinsights/workspaces', parameters('logAnalyticsName'))]",
            "sku": "[variables('sentinelSku')]"
        }
    }
]