Azure Storage should have soft delete enabled

문서 > Datadog 보안 > OOTB Rules > Azure Storage should have soft delete enabled

이 페이지는 아직 영어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우 언제든지 연락주시기 바랍니다.

Description

Azure Storage blobs may contain sensitive data such as ePHI, financial information, secrets, or personal data. Accidental modifications or deletions by applications or users can result in data loss or unavailability. To mitigate this risk, it is recommended to enable soft delete configuration in Azure Storage. This allows for the saving and recovery of data when blobs or blob snapshots are deleted. By enabling recoverable blobs configuration, even if data is deleted from the storage account, it remains recoverable within the specified retention policy timeframe, which can range from 7 to 365 days.

Remediation

From the console

Go to Storage Accounts.
For each Storage Account, navigate to Data protection in the left scroll column.
Check soft delete for both blobs and containers. Set the retention period to a sufficient length for your organization.