Patch 515 (#536)

* Update endpoint-logging-enabled.md * Update endpoint-logging-enabled.md * Images added & Updated for new steps * Apply suggestions from code review Co-authored-by: alphadev4 <[email protected]>
aquasecurity · Nov 4, 2022 · 2d50a5e · 2d50a5e
1 parent c87c45e
commit 2d50a5e
Show file tree

Hide file tree

Showing 9 changed files with 11 additions and 3 deletions.
diff --git a/en/azure/cdnprofiles/endpoint-logging-enabled.md b/en/azure/cdnprofiles/endpoint-logging-enabled.md
@@ -12,8 +12,16 @@
 | **Description** | Ensures that endpoint requests are being logged for CDN endpoints |
 | **More Info** | Endpoint Logging ensures that all requests to a CDN endpoint are logged. |
 | **AZURE Link** | https://docs.microsoft.com/en-us/azure/cdn/cdn-azure-diagnostic-logs |
-| **Recommended Action** | Ensure that diagnostic logging is enabled for each CDN endpoint for each CDN profile |
+| **Recommended Action** | Ensure that diagnostic logging is enabled for each CDN endpoint for each CDN profile. |
 
 ## Detailed Remediation Steps
-
-
+1. Log into the Microsoft Azure Management Console.
+2. Select the "Search resources, services, and docs" option at the top and search for CDN. Select "Front Door and CDN profiles".</br> <img src="/resources/azure/cdnprofiles/endpoint-logging-enabled/step2.png"/>
+3. On the "Front Door and CDN profiles" page, click on the "Name" link to access the configuration changes.</br> <img src="/resources/azure/cdnprofiles/endpoint-logging-enabled/step3.png"/>
+4. In the left navigation panel, click on the "Diagnostic setting" under "Monitoring".</br> <img src="/resources/azure/cdnprofiles/endpoint-logging-enabled/step4.png"/>
+5. In the "Diagnostic setting" panel if you see "No diagnostic settings defined" then logging is not enabled for this CDN. This is against the Azure best practices. Now click on the "+ Add diagnostic setting" link to enable diagnostic logging.</br> <img src="/resources/azure/cdnprofiles/endpoint-logging-enabled/step5.png"/>
+6. On the "Diagnostic setting" page that opens select "all logs" under "Logs".</br> <img src="/resources/azure/cdnprofiles/endpoint-logging-enabled/step6.png"/>
+7. Under "Metrics" select "AllMetrics. </br> <img src="/resources/azure/cdnprofiles/endpoint-logging-enabled/step7.png"/>
+8. Under "Destination details" select "Send to Log Analytics workspace".</br> <img src="/resources/azure/cdnprofiles/endpoint-logging-enabled/step8.png"/>
+9. Click "Save" at the top of the page to save the changes and enable logging.</br> <img src="/resources/azure/cdnprofiles/endpoint-logging-enabled/step9.png"/>
+10. Repeat steps 3 - 9 for all other CDN endpoints.
diff --git a/resources/azure/cdnprofiles/endpoint-logging-enabled/step2.png b/resources/azure/cdnprofiles/endpoint-logging-enabled/step2.png
diff --git a/resources/azure/cdnprofiles/endpoint-logging-enabled/step3.png b/resources/azure/cdnprofiles/endpoint-logging-enabled/step3.png
diff --git a/resources/azure/cdnprofiles/endpoint-logging-enabled/step4.png b/resources/azure/cdnprofiles/endpoint-logging-enabled/step4.png
diff --git a/resources/azure/cdnprofiles/endpoint-logging-enabled/step5.png b/resources/azure/cdnprofiles/endpoint-logging-enabled/step5.png
diff --git a/resources/azure/cdnprofiles/endpoint-logging-enabled/step6.png b/resources/azure/cdnprofiles/endpoint-logging-enabled/step6.png
diff --git a/resources/azure/cdnprofiles/endpoint-logging-enabled/step7.png b/resources/azure/cdnprofiles/endpoint-logging-enabled/step7.png
diff --git a/resources/azure/cdnprofiles/endpoint-logging-enabled/step8.png b/resources/azure/cdnprofiles/endpoint-logging-enabled/step8.png
diff --git a/resources/azure/cdnprofiles/endpoint-logging-enabled/step9.png b/resources/azure/cdnprofiles/endpoint-logging-enabled/step9.png