Description

Detects Azure Function Apps that have critical logging features disabled. Disabled logging can impair security monitoring, incident investigation, and compliance requirements by limiting visibility into application errors and incoming requests.

Detection Strategy

• Checks if detailed error logging is disabled (detailed_error_logging_enabled = false) for the Function App

• Checks if HTTP request tracing is disabled (request_tracing_enabled = false) for the Function App

• Reports a vulnerability if either or both logging features are disabled