related to:
Ensure that logging for Azure Key Vault is 'Enabled'
Context:
This issue relates to the CIS requirement to ensure that logging for Azure Key Vault is enabled.
Problem:
Currently, in our implementation, accessing the specific fields 'days' and 'enabled' within the Azure Key Vault's diagnostic settings is not straightforward. The structure of the returned JSON object from azure.subscription.keyVault.vaults does not allow direct comparison or retrieval of these fields.
Here, both 'days' and 'enabled' fields are nested and not directly accessible for comparison.
Potential Solution:
We need an enhancement or a workaround to access the 'days' value for comparison. A provisional query is available but it does not fully meet our requirements.
related to: Ensure that logging for Azure Key Vault is 'Enabled'
Context:
This issue relates to the CIS requirement to ensure that logging for Azure Key Vault is enabled.
Problem:
Currently, in our implementation, accessing the specific fields 'days' and 'enabled' within the Azure Key Vault's diagnostic settings is not straightforward. The structure of the returned JSON object from azure.subscription.keyVault.vaults does not allow direct comparison or retrieval of these fields.
Example of Current Data Structure:
Here, both 'days' and 'enabled' fields are nested and not directly accessible for comparison.
Potential Solution:
We need an enhancement or a workaround to access the 'days' value for comparison. A provisional query is available but it does not fully meet our requirements.
Affected function in cnquery:
monitor.go