Ensure log profile captures all activities
Log profiles should capture all categories to ensure that all events are logged
Impact
Log profile must capture all activity to be able to ensure that all relevant information possible is available for an investigation
Recommended Actions
Follow the appropriate remediation steps below to resolve the issue.
Configure log profile to capture all activities
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
|
resource "azurerm_monitor_log_profile" "good_example" {
name = "good_example"
categories = [
"Action",
"Delete",
"Write",
]
retention_policy {
enabled = true
days = 365
}
}
|
Links