Turbot Guardrails Hub 
Hub
Mods
Azure
45
Mods
176
Resource Types
3,033
Policies
1,635
Controls
103
Quick Actions
102
IAM

Policy: Azure > CIS v4.0 > 07 - Management and Governance > 07.01 - Logging and Monitoring > 07.01.01 - Configuring Diagnostic Settings > 07.01.01.02 - Ensure Diagnostic Setting captures appropriate categories

Configures auditing against a CIS Benchmark item.

Level: 1

Prerequisite: A Diagnostic Setting must exist. If a Diagnostic Setting does not exist, the navigation and options within this recommendation will not be available. Please review the recommendation at the beginning of this subsection titled: "Ensure that a 'Diagnostic Setting' exists."

The diagnostic setting should be configured to log the appropriate activities from the control/management plane.

A diagnostic setting controls how the diagnostic log is exported. Capturing the diagnostic setting categories for appropriate control/management plane activities allows proper alerting.

Targets

This policy targets the following resource types:

Primary Policy

This policy is used with the following primary policy:

Controls

Setting this policy configures this control:

Policy Specification

Schema Type
string
Default
Per Azure > CIS v4.0 > 07 - Management and Governance > 07.01 - Logging and Monitoring > 07.01.01 - Configuring Diagnostic Settings
Valid Values [YAML]
  • >-
  Per Azure > CIS v4.0 > 07 - Management and Governance > 07.01 - Logging and
  Monitoring > 07.01.01 - Configuring Diagnostic Settings

  • Skip

  • Check: Benchmark

Category

In Your Workspace

Developers