Control: App Service apps should have resource logs enabled
Description
Audit enabling of resource logs on the app. This enables you to recreate activity trails for investigation purposes if a security incident occurs or your network is compromised.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.appservice_web_app_diagnostic_logs_enabled
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.appservice_web_app_diagnostic_logs_enabled --share
SQL
This control uses a named query:
appservice_web_app_diagnostic_logs_enabled