Skip to content

Azure Block Blob Collection security fixes and automation test updates

Compare
Choose a tag to compare
@github-actions github-actions released this 09 Feb 11:58
· 315 commits to master since this release
bbf30ff

Changelog

Below changes are done for Azure Block Blob Collection

  1. Features

    • Added automated tests for ARM templates in github action.
    • Added automated tests for finding older dependencies.
    • Updated function app logging with log levels.
  2. Enhancements / Updates

    • Fixed broken unit tests for Azure Block Blob collection and upgraded test dependencies.
    • Added support for collector and source creation in unit tests.
    • Added test storage account creation in unit tests.
    • Upgraded api version in ARM template resources.
  3. Fixes for soon to be deprecated resources

    • Migrated classic application Insights to workspace-based Application Insights Details
  4. Security / CVE fixes
    Below fixes were done for security and best practices in the ARM template

    • BC_AZR_GENERAL_117: "Ensure that 'supportsHttpsTrafficOnly' is set to 'true'"
    • BC_AZR_NETWORKING_5: "Ensure web app redirects all HTTP traffic to HTTPS in Azure App Service"
    • BC_AZR_NETWORKING_8: "Ensure that 'HTTP Version' is the latest if used to run the web app"
    • BC_AZR_NETWORKING_6: "Ensure web app is using the latest version of TLS encryption"
    • apiVersions Should Be Recent In Reference Functions
    • Location Should Not Be Hardcoded

Upgradation Steps

  1. Deploy the new template, in a new resource group with same http source url as was configured in earlier deployment.
  2. Configure the metrics export to this new event hub namespace by updating the new diagnostic settings.
  3. Verify whether the metrics are coming to Sumo Logic.
  4. After verification, delete the resources in the older resource group created by earlier deployment.