Control: Web app failed request tracing should be enabled

Description

Ensure that Web app enables failed request tracing. This control is non-compliant if Web app failed request tracing is disabled.

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.appservice_web_app_failed_request_tracing_enabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.appservice_web_app_failed_request_tracing_enabled --share

SQL

This control uses a named query:

select
  a.id as resource,
  case
    when diagnostic_logs_configuration -> 'properties' -> 'failedRequestsTracing' ->> 'enabled' = 'true' then 'ok'
    else 'alarm'
  end as status,
  case
    when diagnostic_logs_configuration -> 'properties' -> 'failedRequestsTracing' ->> 'enabled' = 'true' then a.name || ' failed requests tracing enabled.'
    else a.name || ' failed requests tracing disabled.'
  end as reason
  
  , a.resource_group as resource_group
  , sub.display_name as subscription
from
  azure_app_service_web_app as a
  left join azure_subscription as sub on sub.subscription_id = a.subscription_id;

Control: Web app failed request tracing should be enabled

Description

Usage

SQL

Tags