Turbot Guardrails Hub 
Hub
Mods
Azure
45
Mods
176
Resource Types
3,033
Policies
1,635
Controls
103
Quick Actions
102
IAM

Policy: Azure > CIS v4.0 > 07 - Management and Governance > 07.01 - Logging and Monitoring > 07.01.01 - Configuring Diagnostic Settings > 07.01.01.03 - Ensure the storage account containing the container with activity logs is encrypted with Customer Managed Key (CMK)

Configures auditing against a CIS Benchmark item.

Level: 2

Storage accounts with the activity log exports can be configured to use Customer Managed Keys (CMK).

Configuring the storage account with the activity log export container to use CMKs provides additional confidentiality controls on log data, as a given user must have read permission on the corresponding storage account and must be granted decrypt permission by the CMK.

Targets

This policy targets the following resource types:

Primary Policy

This policy is used with the following primary policy:

Controls

Setting this policy configures this control:

Policy Specification

Schema Type
string
Default
Per Azure > CIS v4.0 > 07 - Management and Governance > 07.01 - Logging and Monitoring > 07.01.01 - Configuring Diagnostic Settings
Valid Values [YAML]
  • >-
  Per Azure > CIS v4.0 > 07 - Management and Governance > 07.01 - Logging and
  Monitoring > 07.01.01 - Configuring Diagnostic Settings

  • Skip

  • Check: Benchmark

Category

In Your Workspace

Developers