Skip to content

Latest commit

 

History

History
27 lines (23 loc) · 2.25 KB

endpoint-logging-enabled.md

File metadata and controls

27 lines (23 loc) · 2.25 KB

CloudSploit

AZURE / CDN Profiles / Endpoint Logging Enabled

Quick Info

Plugin Title Endpoint Logging Enabled
Cloud AZURE
Category CDN Profiles
Description Ensures that endpoint requests are being logged for CDN endpoints
More Info Endpoint Logging ensures that all requests to a CDN endpoint are logged.
AZURE Link https://docs.microsoft.com/en-us/azure/cdn/cdn-azure-diagnostic-logs
Recommended Action Ensure that diagnostic logging is enabled for each CDN endpoint for each CDN profile.

Detailed Remediation Steps

  1. Log into the Microsoft Azure Management Console.
  2. Select the "Search resources, services, and docs" option at the top and search for CDN. Select "Front Door and CDN profiles".
  3. On the "Front Door and CDN profiles" page, click on the "Name" link to access the configuration changes.
  4. In the left navigation panel, click on the "Diagnostic setting" under "Monitoring".
  5. In the "Diagnostic setting" panel if you see "No diagnostic settings defined" then logging is not enabled for this CDN. This is against the Azure best practices. Now click on the "+ Add diagnostic setting" link to enable diagnostic logging.
  6. On the "Diagnostic setting" page that opens select "all logs" under "Logs".
  7. Under "Metrics" select "AllMetrics.
  8. Under "Destination details" select "Send to Log Analytics workspace".
  9. Click "Save" at the top of the page to save the changes and enable logging.
  10. Repeat steps 3 - 9 for all other CDN endpoints.