Turbot Guardrails Hub 
Hub
Mods
Azure
45
Mods
176
Resource Types
3,033
Policies
1,635
Controls
103
Quick Actions
102
IAM

Policy: Azure > CIS v5.0 > 6 - Management and Governance Services > 6.01 - Logging and Monitoring > 6.01.01 - Configuring Diagnostic Settings > 6.01.01.07 - Ensure that virtual network flow logs are captured and sent to Log Analytics

Configures auditing against a CIS Benchmark item.

Level: 2

Ensure that VNet Flow logs are captured and sent to Log Analytics for monitoring and analysis.

Virtual Network Flow Logs provide valuable insight into the flow of traffic within your virtual network and feed into both Azure Monitor and Azure Sentinel (if in use), permitting the generation of visual flow diagrams to aid with analyzing for lateral movement, etc. This is an enhancement over NSG Flow Logs as it captures traffic at the virtual network level rather than just network security group level.

Targets

This policy targets the following resource types:

Primary Policy

This policy is used with the following primary policy:

Controls

Setting this policy configures this control:

Policy Specification

Schema Type
string
Default
Per Azure > CIS v5.0 > 06 - Management and Governance Services
Valid Values [YAML]
  • Per Azure > CIS v5.0 > 06 - Management and Governance Services

  • Skip

  • Check: Benchmark using attestation

Category

In Your Workspace

Developers