AzPolicyAdvertizer

last sync: 2024-Sep-18 17:50:24 UTC

App Service app slots should have resource logs enabled

Azure BuiltIn Policy definition

Source Azure Portal
Display name App Service app slots should have resource logs enabled
Id d639b3af-a535-4bef-8dcf-15078cddf5e2
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 1
1.0.0
Built-in Versioning [Preview]
Category App Service
Microsoft Learn
Description Audit enabling of resource logs on the app. This enables you to recreate activity trails for investigation purposes if a security incident occurs or your network is compromised.
Mode Indexed
Type BuiltIn
Preview False
Deprecated False
Effect Default
AuditIfNotExists
Allowed
AuditIfNotExists, Disabled
RBAC role(s) none
Rule aliases THEN-ExistenceCondition (5)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Insights/diagnosticSettings/logs.enabled microsoft.insights diagnosticSettings properties.logs[*].enabled True False
Microsoft.Insights/diagnosticSettings/logs[*] microsoft.insights diagnosticSettings properties.logs[*] True False
Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days microsoft.insights diagnosticSettings properties.logs[*].retentionPolicy.days True False
Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled microsoft.insights diagnosticSettings properties.logs[*].retentionPolicy.enabled True False
Microsoft.Insights/diagnosticSettings/storageAccountId microsoft.insights diagnosticSettings properties.storageAccountId True False
Rule resource types IF (1)
Microsoft.Web/sites/slots
Compliance
The following 1 compliance controls are associated with this Policy definition 'App Service app slots should have resource logs enabled' (d639b3af-a535-4bef-8dcf-15078cddf5e2)
Control Domain Control Name MetadataId Category Title Owner Requirements Description Info Policy#
op.exp.8 Recording of the activity op.exp.8 Recording of the activity 404 not found n/a n/a 67
Initiatives usage
Initiative DisplayName Initiative Id Initiative Category State Type
[Preview]: Control the use of App Service in a Virtual Enclave 528d78c5-246c-4f26-ade6-d30798705411 VirtualEnclaves Preview BuiltIn
Spain ENS 175daf90-21e1-4fec-b745-7b4c909aa94c Regulatory Compliance GA BuiltIn
History
Date/Time (UTC ymd) (i) Change type Change detail
2022-10-07 16:34:28 add d639b3af-a535-4bef-8dcf-15078cddf5e2
JSON compare n/a
JSON
api-version=2021-06-01
EPAC