The CWP for storage account is automatically deleted from the console.

Products

• Cloud Workload Protection for Storage

Issue/Introduction

After using a storage container successfully for over a year, the container was removed from the centralized console automatically.

Cause

Reviewing the spe-azure-protection-controller-service.log showed that it was validating the storage container and received an error java.lang.RuntimeException: javax.net.ssl.SSLHandshakeException: Remote host terminated the handshake.  

An SDK call is used to during validation of a storage account to make sure it exists in Azure.  If an error is returned, the storage container will be removed from the console since it could not be validated.  

When searching the spe_azure-protection-controller-service.log, search for keyword "Enter validateAssets".   Look for the asset name that is missing and follow the logs. If it failed with an error for that storage account.  Then it will be removed by default.

Resolution

The storage queue must be manually added back to the console.