Compliance standards (SOC, ISO, GDPR) in Azure - Mini Project: Build & Apply

Implementing Compliance Standards in Azure Infrastructure

📖 Scenario: You are setting up an Azure environment for a company that must follow strict compliance standards like SOC, ISO, and GDPR. These standards require specific configurations to protect data and ensure privacy.

🎯 Goal: Build an Azure resource group with tags indicating compliance standards, configure a storage account with encryption and access policies, and enable diagnostic settings to monitor compliance.

📋 What You'll Learn

Create an Azure resource group named ComplianceRG

Add tags Compliance: SOC, Compliance: ISO, and Compliance: GDPR to the resource group

Create an Azure Storage Account named compliancestorage with encryption enabled

Set the storage account to allow secure transfer only

Enable diagnostic settings to send logs to a Log Analytics workspace named ComplianceLogs

💡 Why This Matters

🌍 Real World

Companies must comply with standards like SOC, ISO, and GDPR to protect data and avoid penalties. This project shows how to configure Azure resources to meet these requirements.

💼 Career

Cloud engineers and architects often implement compliance controls in cloud infrastructure to ensure security and regulatory adherence.

1

Create the Azure resource group with compliance tags

Create an Azure resource group called ComplianceRG with tags Compliance: SOC, Compliance: ISO, and Compliance: GDPR.

Azure

# Your code here to create resource group ComplianceRG with compliance tags

Need a hint?

Use the tags property to add compliance standards as separate key-value pairs.

2

Add the Azure Storage Account with encryption and secure transfer

Create an Azure Storage Account named compliancestorage inside ComplianceRG with encryption enabled and secure transfer required.

Azure

# Your code here to create storage account compliancestorage with encryption and secure transfer enabled

Need a hint?

Set enable_https_traffic_only to true and configure encryption with key_source as Microsoft.Storage.

3

Create the Log Analytics workspace for compliance logs

Create a Log Analytics workspace named ComplianceLogs in the ComplianceRG resource group.

Azure

# Your code here to create Log Analytics workspace ComplianceLogs

Need a hint?

Use resource_log_analytics_workspace with the correct name and resource group.

4

Enable diagnostic settings to send storage logs to Log Analytics

Add diagnostic settings to the compliancestorage storage account to send logs and metrics to the ComplianceLogs Log Analytics workspace.

Azure

# Your code here to add diagnostic settings for compliancestorage to send logs to ComplianceLogs

Need a hint?

Use resource_diagnostic_setting with target_resource_id and log_analytics_workspace_id set correctly. Enable logs for StorageRead, StorageWrite, StorageDelete and all metrics.