AZDO.1002 - Log Audit Events.
Overview
Auditing should be enabled.
Rationale: Keeping track of activities within your Azure DevOps environment is crucial for security and compliance. Auditing helps you monitor and log these activities, providing transparency and accountability.
Remediation action
Enable the policy to stop these requests and notifications.
- Sign in to your organization.
- Choose Organization settings.
- Select Policies under the Security header.
- Switch the Log Audit Events button to ON.
Results: Auditing is enabled for the organization. Refresh the page to see Auditing appear in the sidebar. Audit events start appearing in Auditing Logs and through any configured audit streams.
Related links
Test Metadata
| Field | Value |
|---|---|
| Test ID | AZDO.1002 |
| Severity | High |
| Suite | Maester |
| Category | Azure DevOps |
| PowerShell test | Test-AzdoLogAuditEvent |
| Services | AzureDevOps |
| Learn more | https://learn.microsoft.com/azure/devops/organizations/audit/azure-devops-auditing?view=azure-devops&tabs=preview-page#enable-and-disable-auditing |
| Tags | AZDO, AZDO.1002 |
Source
- Test:
tests/Maester/AzureDevOps/Test.AZDO.1002.ps1 - Documentation:
tests/Maester/AzureDevOps/Test.AZDO.1002.md