Queue Services Logging Enabled | Vulnerability Database

When using Queue Services for a storage account, logging should be enabled.

Storage Analytics logs detailed information about successful and failed requests to a storage service. This information can be used to monitor individual requests and to diagnose issues with a storage service. Requests are logged on a best-effort basis.

Impact

Recommended Actions

Follow the appropriate remediation steps below to resolve the issue.

Enable logging for Queue Services

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21


resource "azurerm_storage_account" "good_example" {
  name                     = "example"
  resource_group_name      = data.azurerm_resource_group.example.name
  location                 = data.azurerm_resource_group.example.location
  account_tier             = "Standard"
  account_replication_type = "GRS"
  queue_properties {
    logging {
      delete                = true
      read                  = true
      write                 = true
      version               = "1.0"
      retention_policy_days = 10
    }
  }
}

resource "azurerm_storage_queue" "good_example" {
  name                 = "my-queue"
  storage_account_name = azurerm_storage_account.good_example.name
}

Remediation Links

https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/storage_account#logging