Diagnostic logs should be enabled in App Service

[feliperomero3]

Description

Audit enabling of diagnostic logs on the app.
This enables you to recreate activity trails for investigation purposes if a security incident occurs or your network is compromised.

Remediation steps

Manual remediation

To enable App Service diagnostics:

1. Navigate to Azure App Service and select App Service logs
2. In Application logging, select File System
3. Specify the retention period for the logs
4. If using Azure monitor select Diagnostic settings and click Add diagnostic setting
5. Select one or more catagories of logs to collect
6. Select one of the options to store the diagnostics logs and follow the instructions.
   For more information, visit https://aka.ms/enable-logs