AzPolicyAdvertizer

last sync: 2024-Jul-26 18:17:39 UTC

App Service app slots should have resource logs enabled

Azure BuiltIn Policy definition

Source Azure Portal
Display name App Service app slots should have resource logs enabled
Id d639b3af-a535-4bef-8dcf-15078cddf5e2
Version 1.0.0
Details on versioning
Category App Service
Microsoft Learn
Description Audit enabling of resource logs on the app. This enables you to recreate activity trails for investigation purposes if a security incident occurs or your network is compromised.
Mode Indexed
Type BuiltIn
Preview False
Deprecated False
Effect Default
AuditIfNotExists
Allowed
AuditIfNotExists, Disabled
RBAC role(s) none
Rule aliases THEN-ExistenceCondition (5)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Insights/diagnosticSettings/logs.enabled microsoft.insights diagnosticSettings properties.logs[*].enabled True False
Microsoft.Insights/diagnosticSettings/logs[*] microsoft.insights diagnosticSettings properties.logs[*] True False
Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days microsoft.insights diagnosticSettings properties.logs[*].retentionPolicy.days True False
Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled microsoft.insights diagnosticSettings properties.logs[*].retentionPolicy.enabled True False
Microsoft.Insights/diagnosticSettings/storageAccountId microsoft.insights diagnosticSettings properties.storageAccountId True False
Rule resource types IF (1)
Microsoft.Web/sites/slots
Compliance
The following 1 compliance controls are associated with this Policy definition 'App Service app slots should have resource logs enabled' (d639b3af-a535-4bef-8dcf-15078cddf5e2)
Control Domain Control Name MetadataId Category Title Owner Requirements Description Info Policy#
op.exp.8 Recording of the activity op.exp.8 Recording of the activity 404 not found n/a n/a 67
Initiatives usage
Initiative DisplayName Initiative Id Initiative Category State Type
[Preview]: Control the use of App Service in a Virtual Enclave 528d78c5-246c-4f26-ade6-d30798705411 VirtualEnclaves Preview BuiltIn
Spain ENS 175daf90-21e1-4fec-b745-7b4c909aa94c Regulatory Compliance GA BuiltIn
History
Date/Time (UTC ymd) (i) Change type Change detail
2022-10-07 16:34:28 add d639b3af-a535-4bef-8dcf-15078cddf5e2
JSON compare n/a
JSON
api-version=2021-06-01
EPAC