🧠 Azure Storage classic logging has no bounded retention - prod.logic.yaml🟢
- Contextual name: 🧠 prod.logic.yaml🟢
- ID:
/ce/ca/azure/storage/classic-logging-without-retention/prod.logic.yaml - Tags:
Uses
Test Results 🟢
Generated at: 2026-09-22T15:06:50.756132776Z Open
| Result | Id | Condition Index | Condition Text | Runtime Error |
|---|---|---|---|---|
| 🟢 | 001 | ✔️ 199 | ✔️ not(extract('CA10__blobLoggingReadState__c') == 'Enabled' || extract('CA10__blobLoggingWriteState__c') == 'Enabled' || extract('CA10__blobLoggingDeleteState__c') == 'Enabled') && not(extract('CA10__queueLoggingReadState__c') == 'Enabled' || extract('CA10__queueLoggingWriteState__c') == 'Enabled' || extract('CA10__queueLoggingDeleteState__c') == 'Enabled') && not(extract('CA10__tableLoggingReadState__c') == 'Enabled' || extract('CA10__tableLoggingWriteState__c') == 'Enabled' || extract('CA10__tableLoggingDeleteState__c') == 'Enabled') | ✔️ null |
| 🟢 | gone | ✔️ 99 | ✔️ isDisappeared(CA10__disappearanceTime__c) | ✔️ null |
| 🟢 | missing | ✔️ 299 | ✔️ ((extract('CA10__blobLoggingReadState__c') == 'Enabled' || extract('CA10__blobLoggingWriteState__c') == 'Enabled' || extract('CA10__blobLoggingDeleteState__c') == 'Enabled') && (extract('CA10__blobLoggingRetentionPolicyState__c').isEmpty() || extract('CA10__blobLoggingRetentionPolicyDays__c').isEmpty())) || ((extract('CA10__queueLoggingReadState__c') == 'Enabled' || extract('CA10__queueLoggingWriteState__c') == 'Enabled' || extract('CA10__queueLoggingDeleteState__c') == 'Enabled') && (extract('CA10__queueLoggingRetentionPolicyState__c').isEmpty() || extract('CA10__queueLoggingRetentionPolicyDays__c').isEmpty())) || ((extract('CA10__tableLoggingReadState__c') == 'Enabled' || extract('CA10__tableLoggingWriteState__c') == 'Enabled' || extract('CA10__tableLoggingDeleteState__c') == 'Enabled') && (extract('CA10__tableLoggingRetentionPolicyState__c').isEmpty() || extract('CA10__tableLoggingRetentionPolicyDays__c').isEmpty())) | ✔️ null |
| 🟢 | unbounded | ✔️ 399 | ✔️ ((extract('CA10__blobLoggingReadState__c') == 'Enabled' || extract('CA10__blobLoggingWriteState__c') == 'Enabled' || extract('CA10__blobLoggingDeleteState__c') == 'Enabled') && (extract('CA10__blobLoggingRetentionPolicyState__c') == 'Disabled' || extract('CA10__blobLoggingRetentionPolicyDays__c') <= number(0.0))) || ((extract('CA10__queueLoggingReadState__c') == 'Enabled' || extract('CA10__queueLoggingWriteState__c') == 'Enabled' || extract('CA10__queueLoggingDeleteState__c') == 'Enabled') && (extract('CA10__queueLoggingRetentionPolicyState__c') == 'Disabled' || extract('CA10__queueLoggingRetentionPolicyDays__c') <= number(0.0))) || ((extract('CA10__tableLoggingReadState__c') == 'Enabled' || extract('CA10__tableLoggingWriteState__c') == 'Enabled' || extract('CA10__tableLoggingDeleteState__c') == 'Enabled') && (extract('CA10__tableLoggingRetentionPolicyState__c') == 'Disabled' || extract('CA10__tableLoggingRetentionPolicyDays__c') <= number(0.0))) | ✔️ null |
| 🟢 | bounded | ✔️ 400 | ✔️ otherwise | ✔️ null |
Generation Bundle
| File | MD5 | |
|---|---|---|
| Open | /ce/ca/azure/storage/classic-logging-without-retention/policy.yaml | 827CBBEE3014C9C6DCF0E8F1B8A60FE1 |
| Open | /ce/ca/azure/storage/classic-logging-without-retention/prod.logic.yaml | 9B7B3A81EF721BA9E0B26A7FDA1556BC |
| Open | /ce/ca/azure/storage/classic-logging-without-retention/test-data.json | E789915E0331D70DAD0538B133A6AE43 |
| Open | /types/CA10__CaAzureStorageAccount__c/object.extracts.yaml | DF0B0F4A488784069D6A056FBD3A3133 |
Available Commands
repo-manager policies generate FULL /ce/ca/azure/storage/classic-logging-without-retention/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/azure/storage/classic-logging-without-retention/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/azure/storage/classic-logging-without-retention/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/azure/storage/classic-logging-without-retention/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/azure/storage/classic-logging-without-retention/prod.logic.yaml
Content
---
inputType: "CA10__CaAzureStorageAccount__c"
testData:
- file: "test-data.json"
importExtracts:
- file: "/types/CA10__CaAzureStorageAccount__c/object.extracts.yaml"
conditions:
- status: "INAPPLICABLE"
currentStateMessage: "No classic Blob, Queue, or Table logging operation is enabled."
check:
AND:
args:
- NOT:
arg:
OR:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__blobLoggingReadState__c"
right:
TEXT: "Enabled"
- IS_EQUAL:
left:
EXTRACT: "CA10__blobLoggingWriteState__c"
right:
TEXT: "Enabled"
- IS_EQUAL:
left:
EXTRACT: "CA10__blobLoggingDeleteState__c"
right:
TEXT: "Enabled"
- NOT:
arg:
OR:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__queueLoggingReadState__c"
right:
TEXT: "Enabled"
- IS_EQUAL:
left:
EXTRACT: "CA10__queueLoggingWriteState__c"
right:
TEXT: "Enabled"
- IS_EQUAL:
left:
EXTRACT: "CA10__queueLoggingDeleteState__c"
right:
TEXT: "Enabled"
- NOT:
arg:
OR:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__tableLoggingReadState__c"
right:
TEXT: "Enabled"
- IS_EQUAL:
left:
EXTRACT: "CA10__tableLoggingWriteState__c"
right:
TEXT: "Enabled"
- IS_EQUAL:
left:
EXTRACT: "CA10__tableLoggingDeleteState__c"
right:
TEXT: "Enabled"
- status: "UNDETERMINED"
currentStateMessage: "Enabled classic logging has incomplete retention evidence."
check:
OR:
args:
- AND:
args:
- OR:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__blobLoggingReadState__c"
right:
TEXT: "Enabled"
- IS_EQUAL:
left:
EXTRACT: "CA10__blobLoggingWriteState__c"
right:
TEXT: "Enabled"
- IS_EQUAL:
left:
EXTRACT: "CA10__blobLoggingDeleteState__c"
right:
TEXT: "Enabled"
- OR:
args:
- IS_EMPTY:
arg:
EXTRACT: "CA10__blobLoggingRetentionPolicyState__c"
- IS_EMPTY:
arg:
EXTRACT: "CA10__blobLoggingRetentionPolicyDays__c"
- AND:
args:
- OR:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__queueLoggingReadState__c"
right:
TEXT: "Enabled"
- IS_EQUAL:
left:
EXTRACT: "CA10__queueLoggingWriteState__c"
right:
TEXT: "Enabled"
- IS_EQUAL:
left:
EXTRACT: "CA10__queueLoggingDeleteState__c"
right:
TEXT: "Enabled"
- OR:
args:
- IS_EMPTY:
arg:
EXTRACT: "CA10__queueLoggingRetentionPolicyState__c"
- IS_EMPTY:
arg:
EXTRACT: "CA10__queueLoggingRetentionPolicyDays__c"
- AND:
args:
- OR:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__tableLoggingReadState__c"
right:
TEXT: "Enabled"
- IS_EQUAL:
left:
EXTRACT: "CA10__tableLoggingWriteState__c"
right:
TEXT: "Enabled"
- IS_EQUAL:
left:
EXTRACT: "CA10__tableLoggingDeleteState__c"
right:
TEXT: "Enabled"
- OR:
args:
- IS_EMPTY:
arg:
EXTRACT: "CA10__tableLoggingRetentionPolicyState__c"
- IS_EMPTY:
arg:
EXTRACT: "CA10__tableLoggingRetentionPolicyDays__c"
- status: "INCOMPLIANT"
currentStateMessage: "Enabled classic logging has disabled or non-positive retention."
remediationMessage: "Set a reviewed positive retention period for each enabled service."
check:
OR:
args:
- AND:
args:
- OR:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__blobLoggingReadState__c"
right:
TEXT: "Enabled"
- IS_EQUAL:
left:
EXTRACT: "CA10__blobLoggingWriteState__c"
right:
TEXT: "Enabled"
- IS_EQUAL:
left:
EXTRACT: "CA10__blobLoggingDeleteState__c"
right:
TEXT: "Enabled"
- OR:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__blobLoggingRetentionPolicyState__c"
right:
TEXT: "Disabled"
- LESS_THAN_EQUAL:
left:
EXTRACT: "CA10__blobLoggingRetentionPolicyDays__c"
right:
NUMBER: 0.0
- AND:
args:
- OR:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__queueLoggingReadState__c"
right:
TEXT: "Enabled"
- IS_EQUAL:
left:
EXTRACT: "CA10__queueLoggingWriteState__c"
right:
TEXT: "Enabled"
- IS_EQUAL:
left:
EXTRACT: "CA10__queueLoggingDeleteState__c"
right:
TEXT: "Enabled"
- OR:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__queueLoggingRetentionPolicyState__c"
right:
TEXT: "Disabled"
- LESS_THAN_EQUAL:
left:
EXTRACT: "CA10__queueLoggingRetentionPolicyDays__c"
right:
NUMBER: 0.0
- AND:
args:
- OR:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__tableLoggingReadState__c"
right:
TEXT: "Enabled"
- IS_EQUAL:
left:
EXTRACT: "CA10__tableLoggingWriteState__c"
right:
TEXT: "Enabled"
- IS_EQUAL:
left:
EXTRACT: "CA10__tableLoggingDeleteState__c"
right:
TEXT: "Enabled"
- OR:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__tableLoggingRetentionPolicyState__c"
right:
TEXT: "Disabled"
- LESS_THAN_EQUAL:
left:
EXTRACT: "CA10__tableLoggingRetentionPolicyDays__c"
right:
NUMBER: 0.0
otherwise:
status: "COMPLIANT"
currentStateMessage: "Enabled classic logging has bounded retention."