About
This compliance check looks at the storage accounts in your connected Azure subscription. It passes when each storage account has the Secure transfer required property turned on. With that property on, a storage account accepts requests from secure connections only, and any request that comes from an insecure connection is rejected. Microsoft recommends requiring secure transfer for all of your storage accounts.
The check is part of the Azure Baseline Controls, the set of checks that the Azure integration runs. Results appear in Monitor › Compliance Checks.
Turn on Secure transfer required
You make this change in the Azure portal, not in ControlMap. You can turn on the property in either of these cases:
- When you create a storage account in the Azure portal.
- On a storage account that already exists.
Microsoft describes the steps for ensuring this control on its own website:
https://docs.microsoft.com/en-us/azure/storage/common/storage-require-secure-transfer
Check the result in ControlMap
To see how this check is doing:
- Go to Monitor › Compliance Checks.
- In Search compliance checks, type Secure transfer required.
- Find the row titled "AZURE BL 1-1 Storage accounts - Secure transfer required must be enabled" and read its Status.
- To see the details behind the result, open Compliance check actions for that row and select View Evidence. The Scan results tab opens.
The Status column shows one of these values:
- Passing
- Failing
- Error
- No Data: the test hasn't run yet, or the resources it tests don't exist yet in the connected environment.
