Policy: Azure > CIS v1 > 6 Networking > 6.04 Ensure that Network Security Group Flow Log retention period is 'greater than 90 days' (Scored)

Configures auditing against a CIS Benchmark item.

Level: 2 (Scored)

Network Security Group Flow Logs should be enabled and the retention period is set to greater than or equal to 90 days.

Resource Types

This policy targets the following resource types:

This policy is used with the following primary policy:

Schema Type	`string`
Default	`Per Azure > CIS v1`
Valid Values [YAML]	`Per Azure > CIS v1` `Skip` `Check: Level 2 (Scored)`

Category URI

tmod:@turbot/cis#/control/categories/v070604

Policy Type URI

tmod:@turbot/azure-cisv1#/policy/types/r0604

GraphQL

query policyType(id: "tmod:@turbot/azure-cisv1#/policy/types/r0604") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/azure-cisv1#/policy/types/r0604'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/azure-cisv1#/policy/types/r0604'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/azure-cisv1#/policy/types/r0604"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/azure-cisv1#/policy/types/r0604"