CCSS (Common Configuration Scoring System) is a set of measures used to determine the severity of the rule.
Each rule is associated with a high-level category. For example IAM, Container, Monitoring, Logging, Network, etc.
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsYou will be unable to monitor individual requests and to diagnose issues with the Azure Queue Storage service.
Add resource.properties.logs attribute entry for each of StorageRead, StorageWrite, and StorageDelete.
Set delete,read, and write in queue_properties.logging or in azurerm_storage_account_queue_properties.logging to true.
queue_properties.logging block of an azurerm_storage_account resource is configured.logging block of an azurerm_storage_account_queue_properties resource is configured.Example configuration:
# For Azure provider < v4.0.0
resource "azurerm_storage_account" "allowed" {
name = "storageaccountname"
resource_group_name = azurerm_resource_group.example.name
location = azurerm_resource_group.example.location
account_tier = "Standard"
account_replication_type = "LRS"
queue_properties {
logging {
delete = true
read = true
version = "1.0"
write = true
}
}
}
# For Azure provider >= v4.0.0
resource "azurerm_storage_account" "allowed" {
name = "storageaccountname"
resource_group_name = azurerm_resource_group.example.name
location = azurerm_resource_group.example.location
account_tier = "Standard"
account_replication_type = "LRS"
}
resource "azurerm_storage_account_queue_properties" allowed {
storage_account_id = azurerm_storage_account.allowed.id
logging {
version = "1.0"
delete = true
read = true
write = true
retention_policy_days = 180
}
}