Azure Compliance ControlsAzure Monitor
Azure subscriptions should have a log profile for Activity Log
This policy ensures if a log profile is enabled for exporting activity logs. It audits if there is no log profile created to export the logs either to a storage account or to an event hub.
What this control checks
Audits subscriptions with no log profile exporting activity logs to a storage account or event hub
Framework mappings
The clauses this control is mapped to in each framework.
- 3.1.c Role based Access Control
- 3.1.g Trails
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
log_profile_enabled_for_all_subscription - Powerpipe Control:
azure_compliance.control.log_profile_enabled_for_all_subscription - Azure Policy Definition:
7796937f-307b-4598-941c-67d3a05ebfe7
Last reviewed: 2026-10-13