Azure Compliance ControlsAzure Storage
Storage accounts should have blob versioning enabled
Checks whether blob versioning is turned on for each storage account. Versioning automatically retains previous versions of blobs that are created by updates or deletes. Prowler rates this check medium severity.
What this control checks
Blob versioning enabled on storage accounts
Framework mappings
The clauses this control is mapped to in each framework.
- 10.2.2 Ensure 'Versioning' is set to 'Enabled' on Azure Blob Storage storage accounts
- 9.2.3 Ensure 'Versioning' is set to 'Enabled' on Azure Blob Storage storage accounts
RBI Cyber Security Framework for UCBs
- Annex I (12)
- AM-09.01B Assets are classified and, if possible, labelled. Classification and labelling of an asset reflect the protection needs of the category of cloud service customer data, cloud service derived data, cloud service provider data and account data it processes, stores, or transmits.
- OPS-09.02B The data classification of the original data is applied to backups.
- OPS-33.02B Patch management procedures are harmonised with the cloud service provider's overall software change management process.
- 164.308(a)(7)(i) Contingency plan
- 164.308(a)(7)(ii)(A) Data backup plan
- 164.308(a)(7)(ii)(B) Disaster recovery plan
- 164.312(c)(1) Integrity
- 164.312(c)(2) Mechanism to authenticate electronic protected health information
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
storage_account_blob_versioning_enabled - Powerpipe Control:
azure_compliance.control.storage_account_blob_versioning_enabled - Prowler Check:
storage_blob_versioning_is_enabled
Last reviewed: 2026-10-15