When using Queue Services for a storage account, logging should be enabled.

Property
Language
Severity
Service	storage
Provider	Azure
Vulnerability Type	omission

Description#

Queue services in the Azure storage account are configured without logging enabled, preventing the collection of detailed information about successful and failed requests. This omission limits visibility into service operations and access patterns.

Impact#

Without logging, it is difficult to detect unauthorized access, investigate incidents, or troubleshoot issues related to the storage queue. This lack of audit data can hinder security monitoring and compromise the ability to respond to or recover from potential attacks or misconfigurations.

Resolution#

Enable logging for Queue Services