Ensure auditing and monitoring is enabled for Azure App Service

MEDIUM

Description

Disabling auditing and monitoring services may make audit challenging for Azure App Service.

Remediation

In Azure Console -

  1. Open the Azure Portal and go to App Services.
  2. Select the App service you wish to edit.
  3. Select App Service Logs under Monitoring.
  4. Configure logs accordingly.
  5. Save.

In Terraform -

  1. In the azurerm_app_service resource, configure a logs block accordingly.

References:
https://learn.microsoft.com/en-us/azure/app-service/troubleshoot-diagnostic-logs
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/app_service#logs

Policy Details

Rule Reference ID: AC_AZURE_0192
CSP: Azure
Remediation Available: No
Resource Category: Serverless
Resource Type: App Service

Frameworks