ssc-spc-ccoe-cei / azure-guardrails-solution-accelerator

This implementation automates reporting to verify compliance with GC Cloud Guardrails. SSC and TBS review the results. Cette mise en œuvre automatise la production de rapports afin de vérifier la conformité aux mesures de sécurité infonuagique du GC. SPC et SCT examinent les résultats.
Other
11 stars 4 forks source link

[Enhancement] - GR1 | Validation 4 | User Account GC Event Logging Check (M) #202

Closed singhgss closed 1 month ago

singhgss commented 1 month ago

Overview/Summary

This Pull Request implements the User Account GC Event Logging Check (M) for Guardrail 1, Validation 4. It adds functionality to verify log collection, storage, and retention in accordance with the control requirements.

This PR adds/changes

  1. Implement check for enabled logs in Log Analytics Workspace
  2. Add verification of log parsing and review using Azure Monitor Logs
  3. Implement checks for log protection and retention
  4. Add compliance status determination and appropriate comments in English and French
  5. Added changes to zipemall.ps1 to support zipping only specific modules when needed.

Breaking Changes

None

Testing Evidence

image

As part of this Pull Request I have