Blob Service storage logging should be enabled for 'Read', 'Write', and 'Delete' requests

azure.storage
이 페이지는 아직 한국어로 제공되지 않으며 번역 작업 중입니다. 번역에 관한 질문이나 의견이 있으시면 언제든지 저희에게 연락해 주십시오.

Description

Storage Logging operates on the server-side, logging details of both successful and failed requests in the storage account, including timing, authentication, concurrency information, and the sizes of the request and response messages. The logs provide insights into all read, write, and delete operations against the blobs. Additionally, Storage Analytics logs capture detailed information about requests to a storage service to monitor every individual request for increased security or diagnostics. However, due to its potential impact on costs, Storage Analytics logging is not automatically enabled and requires careful consideration of usage and projected costs before activation.

Remediation

From the console

  1. Open Azure portal at https://portal.azure.com/
  2. Navigate to your existing blob storage account.
  3. Inside your blob storage account, select Settings, then choose Diagnostic settings.
  4. Click on Add diagnostic setting.
  5. Under the Blob Service section, ensure Read, Write, and Delete boxes are checked.
  6. You can choose to save them to a Storage Account, stream them to an Event Hub, or send them to Log Analytics.
  7. Click Save at the top of the page.