Azure Misconfigurations
Storage Audit
Azure Misconfigurations
Storage Audit
Checks performed
- Access Keys Not Rotated
- Secure Transfer (HTTPS) Not Enforced
- Blob Containers Allowing Public Access
- Storage Accounts Allowing Public Traffic
- Trusted Microsoft Services Enabled
- Enable Immutable Blob Storage
- Storage Account Encryption using Customer Managed Keys
- Check for Sufficient Soft Deleted Data Retention Period
- Configure Minimum TLS Version
- Enable Blob Storage Lifecycle Management
- Enable Soft Delete for Azure Blob Storage