Ensure that Soft Delete feature is enabled for all your Microsoft Azure Storage blob objects (blobs and snapshots). Soft Delete enables you to save and recover blob data in case your Azure Storage blobs or blob snapshots are deleted. This extra layer of protection also extends to the Microsoft Azure blob data that is erased as the result of an overwrite operation. With Soft Delete feature enabled, when blob objects are deleted, they are transitioned to a soft deleted state instead of being permanently erased. When blob objects are overwritten, soft deleted snapshots are created to save the state of the overwritten blob data.
This rule resolution is part of the Conformity Security & Compliance tool for Azure.
Ensure that Soft Delete feature is enabled for all your Microsoft Azure Storage blob objects (blobs and snapshots). Soft Delete enables you to save and recover blob data in case your Azure Storage blobs or blob snapshots are deleted. This extra layer of protection also extends to the Microsoft Azure blob data that is erased as the result of an overwrite operation. With Soft Delete feature enabled, when blob objects are deleted, they are transitioned to a soft deleted state instead of being permanently erased. When blob objects are overwritten, soft deleted snapshots are created to save the state of the overwritten blob data.
Audit
Once enabled, the Soft Delete feature provides soft delete behavior for Azure blob objects in order to recover your blob data more easily in case this is erroneously modified or deleted by one of your applications or by one of your storage account users.
Remediation / Resolution
To enable Soft Delete protection feature for all your Azure Storage blob objects, perform the following actions:
References
- Azure Official Documentation
- What is Azure Blob storage?
- Introduction to Azure Blob storage
- Soft delete for Blob storage
- Azure PowerShell Documentation
- az storage account list
- az storage blob service-properties delete-policy show
- az storage blob service-properties delete-policy update