Vnet gateways and subnets diagnostic settings are both accessed the same way. Theyre not under the monitor section of the resource but under activity log then diagnostic settings. I have a policy to define these settings but there is some discrepancy in confirming if it was succesful. For vnet gateways i see diagnostic settings configured when i go to the overall diagnostics blade and can click on the resource and it shows its defined but not going directly to the resource. It also shows 0/1 non compliant so its picking up that its compliant and enabled. For subscriptions how do I confirm this?