Policy: Azure > CIS v4.0 > 10 - Storage Services > 10.02 - Azure Blob Storage > 10.02.01 - Ensure that soft delete for blobs on Azure Blob Storage storage accounts is Enabled

Configures auditing against a CIS Benchmark item.

Level: 1

Blob soft delete enables protection against accidental deletion of blob data. When soft delete is enabled, if a blob or blob snapshot is deleted, it transitions to a soft deleted state instead of being permanently erased. You can configure the retention period during which soft deleted data is recoverable.

Enabling soft delete protects blob data from accidental deletes, application errors, and malicious activity, allowing recovery of deleted blobs within the configured retention period.

Primary Policy

This policy is used with the following primary policy:

Azure > CIS v4.0 > 10 - Storage Services > 10.02 - Azure Blob Storage

Controls

Setting this policy configures this control:

Azure > CIS v4.0 > 10 - Storage Services > 10.02 - Azure Blob Storage > 10.02.01 - Ensure that soft delete for blobs on Azure Blob Storage storage accounts is Enabled

Policy Specification

Schema Type	`string`
Default	`Per Azure > CIS v4.0 > 10 - Storage Services > 10.02 - Azure Blob Storage`
Valid Values [YAML]	`Per Azure > CIS v4.0 > 10 - Storage Services > 10.02 - Azure Blob Storage` `Skip` `Check: Benchmark`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/cis#/control/categories/v0710

Policy Type URI

tmod:@turbot/azure-cisv4-0#/policy/types/r100201

GraphQL

query policyType(id: "tmod:@turbot/azure-cisv4-0#/policy/types/r100201") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/azure-cisv4-0#/policy/types/r100201'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/azure-cisv4-0#/policy/types/r100201'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/azure-cisv4-0#/policy/types/r100201"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/azure-cisv4-0#/policy/types/r100201"