Turbot Guardrails Hub 
Hub
Mods
Azure
45
Mods
176
Resource Types
3,033
Policies
1,635
Controls
103
Quick Actions
102
IAM

Policy: Azure > CIS v4.0 > 10 - Storage Services > 10.02 - Azure Blob Storage > 10.02.01 - Ensure that soft delete for blobs on Azure Blob Storage storage accounts is Enabled

Configures auditing against a CIS Benchmark item.

Level: 1

Blob soft delete enables protection against accidental deletion of blob data. When soft delete is enabled, if a blob or blob snapshot is deleted, it transitions to a soft deleted state instead of being permanently erased. You can configure the retention period during which soft deleted data is recoverable.

Enabling soft delete protects blob data from accidental deletes, application errors, and malicious activity, allowing recovery of deleted blobs within the configured retention period.

Primary Policy

This policy is used with the following primary policy:

Controls

Setting this policy configures this control:

Policy Specification

Schema Type
string
Default
Per Azure > CIS v4.0 > 10 - Storage Services > 10.02 - Azure Blob Storage
Valid Values [YAML]
  • Per Azure > CIS v4.0 > 10 - Storage Services > 10.02 - Azure Blob Storage

  • Skip

  • Check: Benchmark

Category

In Your Workspace

Developers