Azure Compliance ControlsAzure Storage
Storage account Blob services should have classic logging enabled
This control verifies that classic logging is enabled for the Azure Blob service. Classic logging captures read, write, and delete operations and stores them in a storage account for auditing and troubleshooting.
What this control checks
Classic logging on the Blob service of Azure storage accounts
Framework mappings
The clauses this control is mapped to in each framework.
- 3.10 Ensure Storage logging is enabled for Blob service for read, write, and delete requests
- 3.10 Ensure Storage logging is enabled for Blob service for 'Read', 'Write', and 'Delete' requests
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
storage_account_blob_service_classic_logging_enabled - Powerpipe Control:
azure_compliance.control.storage_account_blob_service_classic_logging_enabled
Last reviewed: 2026-10-15