Query: Ensure classic logging is enabled for Azure Blob service

Description

This control verifies that classic logging is enabled for the Azure Blob service. Classic logging captures read, write, and delete operations and stores them in a storage account for auditing and troubleshooting. While Azure Monitor diagnostic settings are the recommended approach for newer resources, some legacy environments may still rely on classic logging for operational visibility.

Query

Tables used in this query:

• azure_storage_account
• azure_subscription

Controls using this query:

• 3.10 Ensure Storage logging is enabled for Blob service for 'Read', 'Write', and 'Delete' requests
• 3.10 Ensure Storage logging is enabled for Blob service for read, write, and delete requests
• Ensure classic logging is enabled for Azure Blob service

SQL