How Application Insights Data Integrity is protected

Question

At the moment I am passing a PCI CPOC audit, in which the auditor questions me about the type of security the logs stored in Application Insights have against alteration in integrity or unauthorized modification.

Could you guide me to some documentation that demonstrates this or give me additional details?

Answer 1

@Miguel Cartagenova To know more about how data is collected and what type of security is provided by Microsoft, I would suggest you to check this document.

In short, Microsoft uses data only in order to provide service. Whatever the data is collected, its stored on Microsoft Azure Services and is encrypted at rest and in transit. It can be accessed by the people who have account within your organization and has access to your subscription. You can always limit access to data, by using role based access control. The data stored in application insights cannot be modified, however if any person can get holds of the instrumentation key of application insights, that person will be able to send data which can impact your metrics. To know more about the security policies applied within Azure, do check out this presentation.