Azure Cloud HSM adds hardware-generated, verifiable audit logs
Azure Cloud HSM Hardware Audit Logging is rolling out across public regions, with automatic enablement for newly provisioned resources where available.
The capability records supported HSM management operations and sends events to Azure Monitor Log Analytics for security and compliance workflows.
Customers can independently validate signed audit batches using binary evidence, signatures and certificates from the HSM. Logging uses an immutable partition policy.
Customers remain responsible for monitoring access, retention and review processes, and should check regional availability before planning deployment.
Partner briefing
- What it is
Azure announced hardware-originated audit evidence for Cloud HSM.
- What’s changing
Supported management events reach Log Analytics with materials for independent signature verification.
- Why it matters
The records support compliance reporting and investigations.
- Who it affects
Security, compliance and operations teams running regulated workloads.