Designing and implementing a data auditing strategy

This was the second requirement of our example IAC requirements – to keep track of the activities on the data store for compliance purposes. Data auditing is the process of keeping track of the activities that were performed on a service. This is usually done via logs and metrics. Let's look at how Azure Storage supports data auditing.

Storage auditing

Azure Storage supports audit logging via Storage Analytics logging. This is now called classic monitoring. There is a newer version of logging available under Azure Monitor. Azure Monitor storage support was in preview mode at the time of writing this book. Let's look at both ways of enabling audit logging. Storage Analytics logging can be enabled as shown in the following screenshot:

Using a classic diagnostic setting

Figure 12.5 – Enabling metrics logging for auditing in the Azure storage

Once enabled, the logs will get stored...