Enable Soft Delete on Blob

This CLI command requires 'Microsoft.Storage/storageAccounts/blobServices/write' permission. Successful execution will enable soft delete for blobs on Azure Storage accounts. NOTE: As best practice we are setting delete retention days to 30 days; it can be changed based on customer requirement by cloning the policy.

Cloud Security Posture Management Playbooks

Details

ID	`233f721003ba3699877089e93aa01232`
Suggestion Reason	Recommended for Azure Storage account with soft delete disabled

Source

Trigger_-_Enable_Soft_Delete_on_Blob.json

Download History Raw

{
  "trigger_id": "233f721003ba3699877089e93aa01232",
  "playbook_id": "",
  "suggestion_reason": "Recommended for Azure Storage account with soft delete disabled",
  "description": "This CLI command requires 'Microsoft.Storage/storageAccounts/blobServices/write' permission. Successful execution will enable soft delete for blobs on Azure Storage accounts. NOTE: As best practice we are setting delete retention days to 30 days; it can be changed based on customer requirement by cloning the policy.",
  "trigger_name": "Enable Soft Delete on Blob",
  "automation_type": "command",
  "automation_id": "azure-storage-blob-soft-deletion-enable-quick-action",
  "alerts_filter": {
    "filter": {
      "OR": [
        {
          "SEARCH_FIELD": "matching_service_rule_id",
          "SEARCH_TYPE": "EQ",
          "SEARCH_VALUE": "854edc33-62b4-46c0-83a1-2774ae9ae4ff"
        }
      ]
    }
  }
}