Query: Storage account logging (Classic Diagnostic Setting) for blobs should be enabled

Description

Storage Logging records details of requests (read, write, and delete operations) against your Azure blobs. This policy identifies Azure storage accounts that do not have logging enabled for blobs. As a best practice, enable logging for read, write, and delete request types on blobs.

Query

Tables used in this query:

• azure_storage_account
• azure_subscription

Controls using this query:

• Storage account logging (Classic Diagnostic Setting) for blobs should be enabled

SQL