Skip to content

Commit d54e787

Browse files
Update logging details for anonymous requests
Clarified logging behavior for failed anonymous requests and added details on potential abuse scenarios. Included references to documentation for logged operations and log format.
1 parent 361ac77 commit d54e787

1 file changed

Lines changed: 4 additions & 0 deletions

File tree

articles/storage/common/storage-analytics-logging.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -56,6 +56,10 @@ You can also enable Storage Analytics logs programmatically via the REST API or
5656
- Timeout errors for both client and server
5757
- Failed GET requests with error code 304 (Not Modified)
5858

59+
All other failed anonymous requests are not logged. This can include requests that present a Shared Access Signature (SAS) but fail validation (for example, a SAS signature mismatch). In these cases, the service can't reliably identify the caller, so the request is treated as anonymous for logging purposes. Also, because Storage Analytics log data written to the `$logs` container is billed to the storage account, logging every invalid/unauthenticated request could enable cost-amplification/abuse scenarios (for example, a malicious client generating large volumes of invalid requests to increase logging volume).
60+
61+
A full list of the logged data is documented in the [Storage Analytics Logged Operations and Status Messages](/rest/api/storageservices/storage-analytics-logged-operations-and-status-messages) and [Storage Analytics Log Format](/rest/api/storageservices/storage-analytics-log-format) topics.
62+
5963
All other failed anonymous requests are not logged. A full list of the logged data is documented in the [Storage Analytics Logged Operations and Status Messages](/rest/api/storageservices/storage-analytics-logged-operations-and-status-messages) and [Storage Analytics Log Format](/rest/api/storageservices/storage-analytics-log-format) topics.
6064

6165
> [!NOTE]

0 commit comments

Comments
 (0)