Property
Languageterraform
Severitymedium
Servicemonitor
ProviderAzure
Vulnerability Typeomission

Description#

The log profile is configured to capture activity logs from only a subset of Azure regions, leaving events in other regions unmonitored. This incomplete coverage can result in important activities going unlogged.

Impact#

Failure to log activities in all regions creates visibility gaps, allowing unauthorized or malicious actions in unmonitored regions to go undetected. This can hinder incident response, auditability, and compliance, increasing the risk of undetected breaches or policy violations.

Resolution#

Enable capture for all locations