Control: Azure > CIS v2.0 > 06 - Networking > 6.05 - Ensure that Network Security Group Flow Log retention period is 'greater than 90 days'

Configures auditing against a CIS Benchmark item.

Level: 2

Network Security Group Flow Logs should be enabled and the retention period set to greater than or equal to 90 days.

Resource Types

This control targets the following resource types:

Azure > Network Watcher > Flow Log

Primary Policies

The following policies can be used to configure this control:

6.05 - Ensure that Network Security Group Flow Log retention period is 'greater than 90 days'

In Your Workspace

Developers

Control Type URI

tmod:@turbot/azure-cisv2-0#/control/types/r0605

Category URI

tmod:@turbot/cis#/control/categories/v070605

GraphQL

query controlType(id: "tmod:@turbot/azure-cisv2-0#/control/types/r0605") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/azure-cisv2-0#/control/types/r0605'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/azure-cisv2-0#/control/types/r0605"