π§ Azure Storage Blob Logging is not enabled for Read, Write, and Delete requests - prod.logic.yaml π’
- Contextual name: π§ prod.logic.yaml π’
- ID:
/ce/ca/azure/storage/blob-logging-for-read-write-delete-requests/prod.logic.yaml
- Located in: π Azure Storage Blob Logging is not enabled for Read, Write, and Delete requests π’
Flagsβ
- π’ Logic test success
- π’ Logic with extracts
- π’ Logic with test data
Input Typeβ
Type | API Name | Extracts | Extract Files | Logic Files | |
---|---|---|---|---|---|
π | π Azure Storage Account | CA10__CaAzureStorageAccount__c | 23 | 1 | 13 |
Usesβ
Test Results π’β
Generated at: 2025-04-24T23:45:53.000069374Z Open
Result | Id | Condition Index | Condition Text | Runtime Error |
---|---|---|---|---|
π’ | test1 | βοΈ 99 | βοΈ isDisappeared(CA10__disappearanceTime__c) | βοΈ null |
π’ | test2 | βοΈ 101 | βοΈ CA10__blobLoggingReadState__c.delegatedTo(CA10__blobLoggingReadState__c).isEmpty() | βοΈ null |
π’ | test3 | βοΈ 299 | βοΈ extract('CA10__blobLoggingReadState__c') == 'Disabled' || extract('CA10__blobLoggingWriteState__c') == 'Disabled' || extract('CA10__blobLoggingDeleteState__c') == 'Disabled' | βοΈ null |
π’ | test4 | βοΈ 199 | βοΈ extract('CA10__blobLoggingReadState__c') == 'Enabled' && extract('CA10__blobLoggingWriteState__c') == 'Enabled' && extract('CA10__blobLoggingDeleteState__c') == 'Enabled' | βοΈ null |
Generationβ
File | MD5 | |
---|---|---|
Open | /ce/ca/azure/storage/blob-logging-for-read-write-delete-requests/policy.yaml | 5CAD5B1BAE7F0DD879884024181AE381 |
Open | /ce/ca/azure/storage/blob-logging-for-read-write-delete-requests/prod.logic.yaml | 9065A646B0CDA888C86E0E5E4674D216 |
Open | /types/CA10__CaAzureStorageAccount__c/object.extracts.yaml | 92D968DD14AC8426E1942BC29A409B13 |
Open | /ce/ca/azure/storage/blob-logging-for-read-write-delete-requests/test-data.json | A6AEA8172EFCF19DEF53A48F721B7B18 |
Generate FULL scriptβ
java -jar repo-manager.jar policies generate FULL /ce/ca/azure/storage/blob-logging-for-read-write-delete-requests/prod.logic.yaml
Generate DEBUG scriptβ
java -jar repo-manager.jar policies generate DEBUG /ce/ca/azure/storage/blob-logging-for-read-write-delete-requests/prod.logic.yaml
Generate CAPTURE_TEST_DATA scriptβ
java -jar repo-manager.jar policies generate CAPTURE_TEST_DATA /ce/ca/azure/storage/blob-logging-for-read-write-delete-requests/prod.logic.yaml
Generate TESTS scriptβ
java -jar repo-manager.jar policies generate TESTS /ce/ca/azure/storage/blob-logging-for-read-write-delete-requests/prod.logic.yaml
Execute testsβ
java -jar repo-manager.jar policies test /ce/ca/azure/storage/blob-logging-for-read-write-delete-requests/prod.logic.yaml
Contentβ
---
inputType: "CA10__CaAzureStorageAccount__c"
testData:
- file: "test-data.json"
importExtracts:
- file: "/types/CA10__CaAzureStorageAccount__c/object.extracts.yaml"
conditions:
- status: "COMPLIANT"
currentStateMessage: "Storage Logging for Blob Service is enabled."
check:
AND:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__blobLoggingReadState__c"
right:
TEXT: "Enabled"
- IS_EQUAL:
left:
EXTRACT: "CA10__blobLoggingWriteState__c"
right:
TEXT: "Enabled"
- IS_EQUAL:
left:
EXTRACT: "CA10__blobLoggingDeleteState__c"
right:
TEXT: "Enabled"
- status: "INCOMPLIANT"
currentStateMessage: "Storage Logging for Blob Service is disabled."
remediationMessage: "Consider enabling Storage Logging for read, write, and delete requests."
check:
OR:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__blobLoggingReadState__c"
right:
TEXT: "Disabled"
- IS_EQUAL:
left:
EXTRACT: "CA10__blobLoggingWriteState__c"
right:
TEXT: "Disabled"
- IS_EQUAL:
left:
EXTRACT: "CA10__blobLoggingDeleteState__c"
right:
TEXT: "Disabled"
otherwise:
status: "UNDETERMINED"
currentStateMessage: "Unexpected value in the field."