Adding Logging Enabled Check to Azure Key Vault

Signed-off-by: Justin Nikles <justin.nikles@sap.com>
inspec · Mar 11, 2022 · 8e0e27b · 8e0e27b
1 parent 98d9364
commit 8e0e27b
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/libraries/azure_key_vault.rb b/libraries/azure_key_vault.rb
@@ -99,6 +99,15 @@ def diagnostic_settings_logs
     end
     result
   end
+
+  def has_logging_enabled?
+    return false if diagnostic_settings.nil? || diagnostic_settings.empty?
+    log = diagnostic_settings.each do |setting|
+      log = setting.properties&.logs&.detect { |l| l.category == 'AuditEvent' }
+      break log if log.present?
+    end
+    log&.enabled
+  end
 end
 
 # Provide the same functionality under the old resource name.