Control: Azure subscriptions should have a log profile for Activity Log
Description
This policy ensures if a log profile is enabled for exporting activity logs. It audits if there is no log profile created to export the logs either to a storage account or to an event hub.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.log_profile_enabled_for_all_subscriptionSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.log_profile_enabled_for_all_subscription --shareSQL
This control uses a named query:
log_profile_enabled_for_all_subscription