Enable storage account analytics logging on all storage accounts

Storage Analytics logging allows you to track down operation activity at the blob level (e.g. download, upload…). You might want to enable it to all storage accounts to you could acquire log that would supports security incident investigation.

This article just simply provides you a simple PowerShell script to enable Storage Analytics logging to every storage account in every subscription.

Follow the series below in order to make Storage Analytics log helpful:

Again, Storage Analytics logging only supports Blob, Table and Queue. Moreover, Premium storage account is not supported as well. The script filters storage account SKU tier and to enable Blob service only. You might need to enable Table and Queue service as you wish.

You can build your own script and provide a list of target storage accounts as an input.

There are some helpful references to check out:

This entry was posted in Security Automation and tagged , . Bookmark the permalink.

Leave a Reply