Azure Compliance ControlsAzure Service Bus
Service Bus namespaces should have resource logs enabled
Audit enabling of resource logs. This enables you to recreate activity trails to use for investigation purposes; when a security incident occurs or when your network is compromised. Applies to Microsoft.ServiceBus/namespaces.
What this control checks
Service Bus namespaces must have diagnostic settings with resource logs enabled.
Framework mappings
The clauses this control is mapped to in each framework.
- AU-6(4) Central Review And Analysis
- AU-6(5) Central Review And Analysis
- AU-12 Audit Record Generation
- AU-12(1) System-Wide And Time-Correlated Audit Trial
FedRAMP Moderate Baseline Rev 4
- AU-12 Audit Generation
- 3.3.1: Create and retain system audit logs and records to the extent needed to enable the monitoring, analysis, investigation, and reporting of unlawful or unauthorized system activity
- 3.3.2 Ensure that the actions of individual system users can be uniquely traced to those users, so they can be held accountable for their actions
- AU.L2-3.3.1 Create and retain system audit logs and records to the extent needed to enable the monitoring, analysis, investigation, and reporting of unlawful or unauthorized system activity
- AU.L2-3.3.2 Ensure that the actions of individual system users can be uniquely traced to those users, so they can be held accountable for their actions
- AU-6(4) Central Review And Analysis
- AU-6(5) Integration / Scanning And Monitoring Capabilities
- AU-12 Audit Generation
- AU-12(1) System-Wide / Time-Correlated Audit Trail
- 1208.09aa3System.1-09.aa 09.10 Monitoring
Related controls
- Kubernetes clusters should have logging enabled
- Flow log resources should have flow logging enabled
- Storage account Table services should have Storage Logging enabled for 'Read', 'Write', and 'Delete' requests
- Azure Monitor should have activity log collection enabled for all regions
- Azure subscriptions should have a log profile for Activity Log
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
servicebus_namespace_logging_enabled - Powerpipe Control:
azure_compliance.control.servicebus_namespace_logging_enabled - Azure Policy Definition:
f8d36e2f-389b-4ee4-898d-21aeb69a0f45
Last reviewed: 2026-10-15