| Source | Azure Portal | ||
| Display name | Microsoft Managed Control 1127 - Time Stamps | ||
| Id | 3ce328db-aef3-48ed-9f81-2ab7cf839c66 | ||
| Version | 1.0.0 Details on versioning |
||
| Versioning |
Versions supported for Versioning: 0 Built-in Versioning [Preview] |
||
| Category | Regulatory Compliance Microsoft Learn |
||
| Description | Microsoft implements this Audit and Accountability control | ||
| Additional metadata |
Name/Id: ACF1127 / Microsoft Managed Control 1127 Category: Audit and Accountability Title: Time Stamps - Audit Records Ownership: Customer, Microsoft Description: The information system: Uses internal system clocks to generate time stamps for audit records; and Requirements: For all Azure assets, audit records generated capture the time stamp from the internal system clock of the asset that generated the event. Azure implements time stamps stored in UTC format using NTP Version 3, which is based on the time standard from the United States Naval Observatory. NTP is a protocol designed to synchronize the clocks of computers over a network to a common time base. Azure uses stratum 1 time sources in the United States for the infrastructure. Every pair of redundant core Azure datacenter routers (DCRs) provides clock information to the Azure datacenter devices. The overall approach is to use the DCRs as NTP servers. The DCRs synchronize off the authoritative stratum 1 time sources, with Azure equipment synchronizing off the DCRs. The Azure NTP stratum 1 time servers sync off of the Global Positioning System (GPS) satellites. The same IP addresses for NTP are configured on the DCRs in each Azure datacenter, with routing tables being used to determine the closest source to any given client via an anycast-style solution. These IP addresses are in management IP space and synchronization is done over the management network, which addresses ACL issues. |
||
| Mode | Indexed | ||
| Type | Static | ||
| Preview | False | ||
| Deprecated | False | ||
| Effect | Fixed audit |
||
| RBAC role(s) | none | ||
| Rule aliases | none | ||
| Rule resource types | IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups |
||
| Compliance | Not a Compliance control | ||
| Initiatives usage | none | ||
| History | none | ||
| JSON compare | n/a | ||
| JSON |
|