ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-07-24 21:11:53 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(metadata): update checks metadata for more providers

Browse Source
This commit is contained in:
pedrooot
2024-05-16 13:36:12 +02:00
parent b14cfe14e4
commit accde1244d
280 changed files with 403 additions and 403 deletions
Download Patch File Download Diff File Expand all files Collapse all files
prowler/providers/azure/services/aks/aks_cluster_rbac_enabled/aks_cluster_rbac_enabled.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "aks_cluster_rbac_enabled",
"CheckTitle": "Ensure AKS RBAC is enabled",
"CheckType": [],
"ServiceName": "aks",
"SubServiceName": "",
"ServiceName": "AKS",
"SubServiceName": "Cluster",
"ResourceIdTemplate": "",
"Severity": "medium",
"ResourceType": "Microsoft.ContainerService/ManagedClusters",
prowler/providers/azure/services/aks/aks_clusters_created_with_private_nodes/aks_clusters_created_with_private_nodes.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "aks_clusters_created_with_private_nodes",
"CheckTitle": "Ensure clusters are created with Private Nodes",
"CheckType": [],
"ServiceName": "aks",
"SubServiceName": "",
"ServiceName": "AKS",
"SubServiceName": "Cluster",
"ResourceIdTemplate": "",
"Severity": "high",
"ResourceType": "Microsoft.ContainerService/ManagedClusters",
prowler/providers/azure/services/aks/aks_clusters_public_access_disabled/aks_clusters_public_access_disabled.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "aks_clusters_public_access_disabled",
"CheckTitle": "Ensure clusters are created with Private Endpoint Enabled and Public Access Disabled",
"CheckType": [],
"ServiceName": "aks",
"SubServiceName": "",
"ServiceName": "AKS",
"SubServiceName": "Cluster",
"ResourceIdTemplate": "",
"Severity": "high",
"ResourceType": "Microsoft.ContainerService/ManagedClusters",
prowler/providers/azure/services/aks/aks_network_policy_enabled/aks_network_policy_enabled.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "aks_network_policy_enabled",
"CheckTitle": "Ensure Network Policy is Enabled and set as appropriate",
"CheckType": [],
"ServiceName": "aks",
"SubServiceName": "",
"ServiceName": "AKS",
"SubServiceName": "Network",
"ResourceIdTemplate": "",
"Severity": "medium",
"ResourceType": "Microsoft.ContainerService/managedClusters",
prowler/providers/azure/services/app/app_client_certificates_on/app_client_certificates_on.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "app_client_certificates_on",
"CheckTitle": "Ensure the web app has 'Client Certificates (Incoming client certificates)' set to 'On'",
"CheckType": [],
"ServiceName": "app",
"ServiceName": "App",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "medium",
prowler/providers/azure/services/app/app_ensure_auth_is_set_up/app_ensure_auth_is_set_up.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "app_ensure_auth_is_set_up",
"CheckTitle": "Ensure App Service Authentication is set up for apps in Azure App Service",
"CheckType": [],
"ServiceName": "app",
"ServiceName": "App",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "medium",
prowler/providers/azure/services/app/app_ensure_http_is_redirected_to_https/app_ensure_http_is_redirected_to_https.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "app_ensure_http_is_redirected_to_https",
"CheckTitle": "Ensure Web App Redirects All HTTP traffic to HTTPS in Azure App Service",
"CheckType": [],
"ServiceName": "app",
"ServiceName": "App",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "medium",
prowler/providers/azure/services/app/app_ensure_java_version_is_latest/app_ensure_java_version_is_latest.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "app_ensure_java_version_is_latest",
"CheckTitle": "Ensure that 'Java version' is the latest, if used to run the Web App",
"CheckType": [],
"ServiceName": "app",
"ServiceName": "App",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "low",
prowler/providers/azure/services/app/app_ensure_php_version_is_latest/app_ensure_php_version_is_latest.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "app_ensure_php_version_is_latest",
"CheckTitle": "Ensure That 'PHP version' is the Latest, If Used to Run the Web App",
"CheckType": [],
"ServiceName": "app",
"ServiceName": "App",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "low",
prowler/providers/azure/services/app/app_ensure_python_version_is_latest/app_ensure_python_version_is_latest.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "app_ensure_python_version_is_latest",
"CheckTitle": "Ensure that 'Python version' is the Latest Stable Version, if Used to Run the Web App",
"CheckType": [],
"ServiceName": "app",
"ServiceName": "App",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "low",
prowler/providers/azure/services/app/app_ensure_using_http20/app_ensure_using_http20.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "app_ensure_using_http20",
"CheckTitle": "Ensure that 'HTTP Version' is the Latest, if Used to Run the Web App",
"CheckType": [],
"ServiceName": "app",
"ServiceName": "App",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "low",
prowler/providers/azure/services/app/app_ftp_deployment_disabled/app_ftp_deployment_disabled.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "app_ftp_deployment_disabled",
"CheckTitle": "Ensure FTP deployments are Disabled",
"CheckType": [],
"ServiceName": "app",
"ServiceName": "App",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "medium",
prowler/providers/azure/services/app/app_http_logs_enabled/app_http_logs_enabled.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "app_http_logs_enabled",
"CheckTitle": "Ensure that logging for Azure AppService 'HTTP logs' is enabled",
"CheckType": [],
"ServiceName": "app",
"ServiceName": "App",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "low",
prowler/providers/azure/services/app/app_minimum_tls_version_12/app_minimum_tls_version_12.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "app_minimum_tls_version_12",
"CheckTitle": "Ensure Web App is using the latest version of TLS encryption",
"CheckType": [],
"ServiceName": "app",
"ServiceName": "App",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/app/app_register_with_identity/app_register_with_identity.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "app_register_with_identity",
"CheckTitle": "Ensure that Register with Azure Active Directory is enabled on App Service",
"CheckType": [],
"ServiceName": "app",
"ServiceName": "App",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "medium",
prowler/providers/azure/services/appinsights/appinsights_ensure_is_configured/appinsights_ensure_is_configured.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "appinsights_ensure_is_configured",
"CheckTitle": "Ensure Application Insights are Configured.",
"CheckType": [],
"ServiceName": "appinsights",
"ServiceName": "AppInsights",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "low",
prowler/providers/azure/services/cosmosdb/cosmosdb_account_firewall_use_selected_networks/cosmosdb_account_firewall_use_selected_networks.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cosmosdb_account_firewall_use_selected_networks",
"CheckTitle": "Ensure That 'Firewalls & Networks' Is Limited to Use Selected Networks Instead of All Networks",
"CheckType": [],
"ServiceName": "cosmosdb",
"SubServiceName": "",
"ServiceName": "CosmosDB",
"SubServiceName": "Network",
"ResourceIdTemplate": "",
"Severity": "medium",
"ResourceType": "CosmosDB",
prowler/providers/azure/services/cosmosdb/cosmosdb_account_use_aad_and_rbac/cosmosdb_account_use_aad_and_rbac.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cosmosdb_account_use_aad_and_rbac",
"CheckTitle": "Use Azure Active Directory (AAD) Client Authentication and Azure RBAC where possible.",
"CheckType": [],
"ServiceName": "cosmosdb",
"SubServiceName": "",
"ServiceName": "CosmosDB",
"SubServiceName": "Account",
"ResourceIdTemplate": "",
"Severity": "medium",
"ResourceType": "CosmosDB",
prowler/providers/azure/services/cosmosdb/cosmosdb_account_use_private_endpoints/cosmosdb_account_use_private_endpoints.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cosmosdb_account_use_private_endpoints",
"CheckTitle": "Ensure That Private Endpoints Are Used Where Possible",
"CheckType": [],
"ServiceName": "cosmosdb",
"SubServiceName": "",
"ServiceName": "CosmosDB",
"SubServiceName": "Account",
"ResourceIdTemplate": "",
"Severity": "medium",
"ResourceType": "CosmosDB",
prowler/providers/azure/services/defender/defender_additional_email_configured_with_a_security_contact/defender_additional_email_configured_with_a_security_contact.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "defender_additional_email_configured_with_a_security_contact",
"CheckTitle": "Ensure 'Additional email addresses' is Configured with a Security Contact Email",
"CheckType": [],
"ServiceName": "defender",
"ServiceName": "Defender",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "medium",
prowler/providers/azure/services/defender/defender_assessments_vm_endpoint_protection_installed/defender_assessments_vm_endpoint_protection_installed.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "defender_assessments_vm_endpoint_protection_installed",
"CheckTitle": "Ensure that Endpoint Protection for all Virtual Machines is installed",
"CheckType": [],
"ServiceName": "defender",
"ServiceName": "Defender",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/defender/defender_auto_provisioning_log_analytics_agent_vms_on/defender_auto_provisioning_log_analytics_agent_vms_on.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "defender_auto_provisioning_log_analytics_agent_vms_on",
"CheckTitle": "Ensure that Auto provisioning of 'Log Analytics agent for Azure VMs' is Set to 'On'",
"CheckType": [],
"ServiceName": "defender",
"ServiceName": "Defender",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "medium",
prowler/providers/azure/services/defender/defender_auto_provisioning_vulnerabilty_assessments_machines_on/defender_auto_provisioning_vulnerabilty_assessments_machines_on.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "defender_auto_provisioning_vulnerabilty_assessments_machines_on",
"CheckTitle": "Ensure that Auto provisioning of 'Vulnerability assessment for machines' is Set to 'On'",
"CheckType": [],
"ServiceName": "defender",
"ServiceName": "Defender",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "medium",
prowler/providers/azure/services/defender/defender_container_images_resolved_vulnerabilities/defender_container_images_resolved_vulnerabilities.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "defender_container_images_resolved_vulnerabilities",
"CheckTitle": "Container images used by containers should have vulnerabilities resolved",
"CheckType": [],
"ServiceName": "defender",
"ServiceName": "Defender",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "medium",
prowler/providers/azure/services/defender/defender_container_images_scan_enabled/defender_container_images_scan_enabled.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "defender_container_images_scan_enabled",
"CheckTitle": "Ensure Image Vulnerability Scanning using Azure Defender image scanning or a third party provider",
"CheckType": [],
"ServiceName": "defender",
"ServiceName": "Defender",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "medium",
prowler/providers/azure/services/defender/defender_ensure_defender_for_app_services_is_on/defender_ensure_defender_for_app_services_is_on.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "defender_ensure_defender_for_app_services_is_on",
"CheckTitle": "Ensure That Microsoft Defender for App Services Is Set To 'On' ",
"CheckType": [],
"ServiceName": "defender",
"ServiceName": "Defender",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/defender/defender_ensure_defender_for_arm_is_on/defender_ensure_defender_for_arm_is_on.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "defender_ensure_defender_for_arm_is_on",
"CheckTitle": "Ensure That Microsoft Defender for Azure Resource Manager Is Set To 'On' ",
"CheckType": [],
"ServiceName": "defender",
"ServiceName": "Defender",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/defender/defender_ensure_defender_for_azure_sql_databases_is_on/defender_ensure_defender_for_azure_sql_databases_is_on.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "defender_ensure_defender_for_azure_sql_databases_is_on",
"CheckTitle": "Ensure That Microsoft Defender for Azure SQL Databases Is Set To 'On' ",
"CheckType": [],
"ServiceName": "defender",
"ServiceName": "Defender",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/defender/defender_ensure_defender_for_containers_is_on/defender_ensure_defender_for_containers_is_on.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "defender_ensure_defender_for_containers_is_on",
"CheckTitle": "Ensure That Microsoft Defender for Containers Is Set To 'On' ",
"CheckType": [],
"ServiceName": "defender",
"ServiceName": "Defender",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/defender/defender_ensure_defender_for_cosmosdb_is_on/defender_ensure_defender_for_cosmosdb_is_on.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "defender_ensure_defender_for_cosmosdb_is_on",
"CheckTitle": "Ensure That Microsoft Defender for Cosmos DB Is Set To 'On' ",
"CheckType": [],
"ServiceName": "defender",
"ServiceName": "Defender",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/defender/defender_ensure_defender_for_databases_is_on/defender_ensure_defender_for_databases_is_on.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "defender_ensure_defender_for_databases_is_on",
"CheckTitle": "Ensure That Microsoft Defender for Databases Is Set To 'On' ",
"CheckType": [],
"ServiceName": "defender",
"ServiceName": "Defender",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/defender/defender_ensure_defender_for_dns_is_on/defender_ensure_defender_for_dns_is_on.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "defender_ensure_defender_for_dns_is_on",
"CheckTitle": "Ensure That Microsoft Defender for DNS Is Set To 'On' ",
"CheckType": [],
"ServiceName": "defender",
"ServiceName": "Defender",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/defender/defender_ensure_defender_for_keyvault_is_on/defender_ensure_defender_for_keyvault_is_on.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "defender_ensure_defender_for_keyvault_is_on",
"CheckTitle": "Ensure That Microsoft Defender for KeyVault Is Set To 'On' ",
"CheckType": [],
"ServiceName": "defender",
"ServiceName": "Defender",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/defender/defender_ensure_defender_for_os_relational_databases_is_on/defender_ensure_defender_for_os_relational_databases_is_on.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "defender_ensure_defender_for_os_relational_databases_is_on",
"CheckTitle": "Ensure That Microsoft Defender for Open-Source Relational Databases Is Set To 'On' ",
"CheckType": [],
"ServiceName": "defender",
"ServiceName": "Defender",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/defender/defender_ensure_defender_for_server_is_on/defender_ensure_defender_for_server_is_on.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "defender_ensure_defender_for_server_is_on",
"CheckTitle": "Ensure That Microsoft Defender for Servers Is Set to 'On'",
"CheckType": [],
"ServiceName": "defender",
"ServiceName": "Defender",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/defender/defender_ensure_defender_for_sql_servers_is_on/defender_ensure_defender_for_sql_servers_is_on.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "defender_ensure_defender_for_sql_servers_is_on",
"CheckTitle": "Ensure That Microsoft Defender for SQL Servers on Machines Is Set To 'On' ",
"CheckType": [],
"ServiceName": "defender",
"ServiceName": "Defender",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/defender/defender_ensure_defender_for_storage_is_on/defender_ensure_defender_for_storage_is_on.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "defender_ensure_defender_for_storage_is_on",
"CheckTitle": "Ensure That Microsoft Defender for Storage Is Set To 'On' ",
"CheckType": [],
"ServiceName": "defender",
"ServiceName": "Defender",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/defender/defender_ensure_iot_hub_defender_is_on/defender_ensure_iot_hub_defender_is_on.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "defender_ensure_iot_hub_defender_is_on",
"CheckTitle": "Ensure That Microsoft Defender for IoT Hub Is Set To 'On'",
"CheckType": [],
"ServiceName": "defender",
"ServiceName": "Defender",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/defender/defender_ensure_mcas_is_enabled/defender_ensure_mcas_is_enabled.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "defender_ensure_mcas_is_enabled",
"CheckTitle": "Ensure that Microsoft Defender for Cloud Apps integration with Microsoft Defender for Cloud is Selected",
"CheckType": [],
"ServiceName": "defender",
"ServiceName": "Defender",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "medium",
prowler/providers/azure/services/defender/defender_ensure_notify_alerts_severity_is_high/defender_ensure_notify_alerts_severity_is_high.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "defender_ensure_notify_alerts_severity_is_high",
"CheckTitle": "Ensure That 'Notify about alerts with the following severity' is Set to 'High'",
"CheckType": [],
"ServiceName": "defender",
"ServiceName": "Defender",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/defender/defender_ensure_notify_emails_to_owners/defender_ensure_notify_emails_to_owners.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "defender_ensure_notify_emails_to_owners",
"CheckTitle": "Ensure That 'All users with the following roles' is set to 'Owner'",
"CheckType": [],
"ServiceName": "defender",
"ServiceName": "Defender",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "medium",
prowler/providers/azure/services/defender/defender_ensure_system_updates_are_applied/defender_ensure_system_updates_are_applied.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "defender_ensure_system_updates_are_applied",
"CheckTitle": "Ensure that Microsoft Defender Recommendation for 'Apply system updates' status is 'Completed'",
"CheckType": [],
"ServiceName": "defender",
"ServiceName": "Defender",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/defender/defender_ensure_wdatp_is_enabled/defender_ensure_wdatp_is_enabled.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "defender_ensure_wdatp_is_enabled",
"CheckTitle": "Ensure that Microsoft Defender for Endpoint integration with Microsoft Defender for Cloud is selected",
"CheckType": [],
"ServiceName": "defender",
"ServiceName": "Defender",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "medium",
prowler/providers/azure/services/entra/entra_conditional_access_policy_require_mfa_for_management_api/entra_conditional_access_policy_require_mfa_for_management_api.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "entra_conditional_access_policy_require_mfa_for_management_api",
"CheckTitle": "Ensure Multifactor Authentication is Required for Windows Azure Service Management API",
"CheckType": [],
"ServiceName": "entra",
"SubServiceName": "",
"ServiceName": "Entra",
"SubServiceName": "Manage",
"ResourceIdTemplate": "",
"Severity": "medium",
"ResourceType": "#microsoft.graph.conditionalAccess",
prowler/providers/azure/services/entra/entra_global_admin_in_less_than_five_users/entra_global_admin_in_less_than_five_users.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "entra_global_admin_in_less_than_five_users",
"CheckTitle": "Ensure fewer than 5 users have global administrator assignment",
"CheckType": [],
"ServiceName": "entra",
"SubServiceName": "",
"ServiceName": "Entra",
"SubServiceName": "Manage",
"ResourceIdTemplate": "",
"Severity": "high",
"ResourceType": "#microsoft.graph.directoryRole",
prowler/providers/azure/services/entra/entra_non_privileged_user_has_mfa/entra_non_privileged_user_has_mfa.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "entra_non_privileged_user_has_mfa",
"CheckTitle": "Ensure that 'Multi-Factor Auth Status' is 'Enabled' for all Non-Privileged Users",
"CheckType": [],
"ServiceName": "entra",
"SubServiceName": "",
"ServiceName": "Entra",
"SubServiceName": "Manage",
"ResourceIdTemplate": "",
"Severity": "high",
"ResourceType": "#microsoft.graph.users",
prowler/providers/azure/services/entra/entra_policy_default_users_cannot_create_security_groups/entra_policy_default_users_cannot_create_security_groups.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "entra_policy_default_users_cannot_create_security_groups",
"CheckTitle": "Ensure that 'Users can create security groups in Azure portals, API or PowerShell' is set to 'No'",
"CheckType": [],
"ServiceName": "entra",
"SubServiceName": "",
"ServiceName": "Entra",
"SubServiceName": "Manage",
"ResourceIdTemplate": "",
"Severity": "high",
"ResourceType": "#microsoft.graph.authorizationPolicy",
prowler/providers/azure/services/entra/entra_policy_ensure_default_user_cannot_create_apps/entra_policy_ensure_default_user_cannot_create_apps.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "entra_policy_ensure_default_user_cannot_create_apps",
"CheckTitle": "Ensure That 'Users Can Register Applications' Is Set to 'No'",
"CheckType": [],
"ServiceName": "entra",
"SubServiceName": "",
"ServiceName": "Entra",
"SubServiceName": "Manage",
"ResourceIdTemplate": "",
"Severity": "high",
"ResourceType": "#microsoft.graph.authorizationPolicy",
prowler/providers/azure/services/entra/entra_policy_ensure_default_user_cannot_create_tenants/entra_policy_ensure_default_user_cannot_create_tenants.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "entra_policy_ensure_default_user_cannot_create_tenants",
"CheckTitle": "Ensure that 'Restrict non-admin users from creating tenants' is set to 'Yes'",
"CheckType": [],
"ServiceName": "entra",
"SubServiceName": "",
"ServiceName": "Entra",
"SubServiceName": "Manage",
"ResourceIdTemplate": "",
"Severity": "high",
"ResourceType": "#microsoft.graph.authorizationPolicy",
prowler/providers/azure/services/entra/entra_policy_guest_invite_only_for_admin_roles/entra_policy_guest_invite_only_for_admin_roles.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "entra_policy_guest_invite_only_for_admin_roles",
"CheckTitle": "Ensure that 'Guest invite restrictions' is set to 'Only users assigned to specific admin roles can invite guest users'",
"CheckType": [],
"ServiceName": "entra",
"SubServiceName": "",
"ServiceName": "Entra",
"SubServiceName": "Manage",
"ResourceIdTemplate": "",
"Severity": "medium",
"ResourceType": "#microsoft.graph.authorizationPolicy",
prowler/providers/azure/services/entra/entra_policy_guest_users_access_restrictions/entra_policy_guest_users_access_restrictions.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "entra_policy_guest_users_access_restrictions",
"CheckTitle": "Ensure That 'Guest users access restrictions' is set to 'Guest user access is restricted to properties and memberships of their own directory objects'",
"CheckType": [],
"ServiceName": "entra",
"SubServiceName": "",
"ServiceName": "Entra",
"SubServiceName": "Manage",
"ResourceIdTemplate": "",
"Severity": "medium",
"ResourceType": "#microsoft.graph.authorizationPolicy",
prowler/providers/azure/services/entra/entra_policy_restricts_user_consent_for_apps/entra_policy_restricts_user_consent_for_apps.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "entra_policy_restricts_user_consent_for_apps",
"CheckTitle": "Ensure 'User consent for applications' is set to 'Do not allow user consent'",
"CheckType": [],
"ServiceName": "entra",
"SubServiceName": "",
"ServiceName": "Entra",
"SubServiceName": "Manage",
"ResourceIdTemplate": "",
"Severity": "high",
"ResourceType": "#microsoft.graph.authorizationPolicy",
prowler/providers/azure/services/entra/entra_policy_user_consent_for_verified_apps/entra_policy_user_consent_for_verified_apps.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "entra_policy_user_consent_for_verified_apps",
"CheckTitle": "Ensure 'User consent for applications' Is Set To 'Allow for Verified Publishers'",
"CheckType": [],
"ServiceName": "entra",
"SubServiceName": "",
"ServiceName": "Entra",
"SubServiceName": "Manage",
"ResourceIdTemplate": "",
"Severity": "high",
"ResourceType": "#microsoft.graph.authorizationPolicy",
prowler/providers/azure/services/entra/entra_privileged_user_has_mfa/entra_privileged_user_has_mfa.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "entra_privileged_user_has_mfa",
"CheckTitle": "Ensure that 'Multi-Factor Auth Status' is 'Enabled' for all Privileged Users",
"CheckType": [],
"ServiceName": "entra",
"SubServiceName": "",
"ServiceName": "Entra",
"SubServiceName": "Manage",
"ResourceIdTemplate": "",
"Severity": "high",
"ResourceType": "#microsoft.graph.users",
prowler/providers/azure/services/entra/entra_security_defaults_enabled/entra_security_defaults_enabled.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "entra_security_defaults_enabled",
"CheckTitle": "Ensure Security Defaults is enabled on Microsoft Entra ID",
"CheckType": [],
"ServiceName": "entra",
"SubServiceName": "",
"ServiceName": "Entra",
"SubServiceName": "Manage",
"ResourceIdTemplate": "",
"Severity": "high",
"ResourceType": "#microsoft.graph.identitySecurityDefaultsEnforcementPolicy",
prowler/providers/azure/services/entra/entra_trusted_named_locations_exists/entra_trusted_named_locations_exists.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "entra_trusted_named_locations_exists",
"CheckTitle": "Ensure Trusted Locations Are Defined",
"CheckType": [],
"ServiceName": "entra",
"SubServiceName": "",
"ServiceName": "Entra",
"SubServiceName": "Manage",
"ResourceIdTemplate": "",
"Severity": "medium",
"ResourceType": "#microsoft.graph.ipNamedLocation",
prowler/providers/azure/services/entra/entra_user_with_vm_access_has_mfa/entra_user_with_vm_access_has_mfa.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "entra_user_with_vm_access_has_mfa",
"CheckTitle": "Ensure only MFA enabled identities can access privileged Virtual Machine",
"CheckType": [],
"ServiceName": "iam",
"ServiceName": "IAM",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "medium",
prowler/providers/azure/services/entra/entra_users_cannot_create_microsoft_365_groups/entra_users_cannot_create_microsoft_365_groups.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "entra_users_cannot_create_microsoft_365_groups",
"CheckTitle": "Ensure that 'Users can create Microsoft 365 groups in Azure portals, API or PowerShell' is set to 'No'",
"CheckType": [],
"ServiceName": "entra",
"SubServiceName": "",
"ServiceName": "Entra",
"SubServiceName": "Manage",
"ResourceIdTemplate": "",
"Severity": "high",
"ResourceType": "Microsoft.Users/Settings",
prowler/providers/azure/services/iam/iam_custom_role_has_permissions_to_administer_resource_locks/iam_custom_role_has_permissions_to_administer_resource_locks.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "iam_custom_role_has_permissions_to_administer_resource_locks",
"CheckTitle": "Ensure an IAM custom role has permissions to administer resource locks",
"CheckType": [],
"ServiceName": "iam",
"ServiceName": "IAM",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/iam/iam_subscription_roles_owner_custom_not_created/iam_subscription_roles_owner_custom_not_created.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "iam_subscription_roles_owner_custom_not_created",
"CheckTitle": "Ensure that no custom subscription owner roles are created",
"CheckType": [],
"ServiceName": "iam",
"ServiceName": "IAM",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/keyvault/keyvault_key_expiration_set_in_non_rbac/keyvault_key_expiration_set_in_non_rbac.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "keyvault_key_expiration_set_in_non_rbac",
"CheckTitle": "Ensure that the Expiration Date is set for all Keys in Non-RBAC Key Vaults.",
"CheckType": [],
"ServiceName": "keyvault",
"ServiceName": "Keyvault",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/keyvault/keyvault_key_rotation_enabled/keyvault_key_rotation_enabled.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "keyvault_key_rotation_enabled",
"CheckTitle": "Ensure Automatic Key Rotation is Enabled Within Azure Key Vault for the Supported Services",
"CheckType": [],
"ServiceName": "keyvault",
"ServiceName": "Keyvault",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/keyvault/keyvault_logging_enabled/keyvault_logging_enabled.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "keyvault_logging_enabled",
"CheckTitle": "Ensure that logging for Azure Key Vault is 'Enabled'",
"CheckType": [],
"ServiceName": "keyvault",
"ServiceName": "Keyvault",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "medium",
prowler/providers/azure/services/keyvault/keyvault_non_rbac_secret_expiration_set/keyvault_non_rbac_secret_expiration_set.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "keyvault_non_rbac_secret_expiration_set",
"CheckTitle": "Ensure that the Expiration Date is set for all Secrets in Non-RBAC Key Vaults",
"CheckType": [],
"ServiceName": "keyvault",
"ServiceName": "Keyvault",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/keyvault/keyvault_private_endpoints/keyvault_private_endpoints.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "keyvault_private_endpoints",
"CheckTitle": "Ensure that Private Endpoints are Used for Azure Key Vault",
"CheckType": [],
"ServiceName": "keyvault",
"ServiceName": "Keyvault",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/keyvault/keyvault_rbac_enabled/keyvault_rbac_enabled.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "keyvault_rbac_enabled",
"CheckTitle": "Enable Role Based Access Control for Azure Key Vault",
"CheckType": [],
"ServiceName": "keyvault",
"ServiceName": "Keyvault",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/keyvault/keyvault_rbac_key_expiration_set/keyvault_rbac_key_expiration_set.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "keyvault_rbac_key_expiration_set",
"CheckTitle": "Ensure that the Expiration Date is set for all Keys in RBAC Key Vaults",
"CheckType": [],
"ServiceName": "keyvault",
"ServiceName": "Keyvault",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/keyvault/keyvault_rbac_secret_expiration_set/keyvault_rbac_secret_expiration_set.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "keyvault_rbac_secret_expiration_set",
"CheckTitle": "Ensure that the Expiration Date is set for all Secrets in RBAC Key Vaults",
"CheckType": [],
"ServiceName": "keyvault",
"ServiceName": "Keyvault",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/keyvault/keyvault_recoverable/keyvault_recoverable.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "keyvault_recoverable",
"CheckTitle": "Ensure the Key Vault is Recoverable",
"CheckType": [],
"ServiceName": "keyvault",
"ServiceName": "Keyvault",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/monitor/monitor_alert_create_policy_assignment/monitor_alert_create_policy_assignment.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "monitor_alert_create_policy_assignment",
"CheckTitle": "Ensure that Activity Log Alert exists for Create Policy Assignment",
"CheckType": [],
"ServiceName": "monitor",
"SubServiceName": "",
"ServiceName": "Monitor",
"SubServiceName": "Alert",
"ResourceIdTemplate": "",
"Severity": "high",
"ResourceType": "Monitor",
prowler/providers/azure/services/monitor/monitor_alert_create_update_nsg/monitor_alert_create_update_nsg.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "monitor_alert_create_update_policy_assignment",
"CheckTitle": "Ensure that Activity Log Alert exists for Create or Update Network Security Group",
"CheckType": [],
"ServiceName": "monitor",
"SubServiceName": "",
"ServiceName": "Monitor",
"SubServiceName": "Alert",
"ResourceIdTemplate": "",
"Severity": "high",
"ResourceType": "Monitor",
prowler/providers/azure/services/monitor/monitor_alert_create_update_public_ip_address_rule/monitor_alert_create_update_public_ip_address_rule.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "monitor_alert_create_update_public_ip_address_rule",
"CheckTitle": "Ensure that Activity Log Alert exists for Create or Update Public IP Address rule",
"CheckType": [],
"ServiceName": "monitor",
"SubServiceName": "",
"ServiceName": "Monitor",
"SubServiceName": "Alert",
"ResourceIdTemplate": "",
"Severity": "high",
"ResourceType": "Monitor",
prowler/providers/azure/services/monitor/monitor_alert_create_update_security_solution/monitor_alert_create_update_security_solution.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "monitor_alert_create_update_security_solution",
"CheckTitle": "Ensure that Activity Log Alert exists for Create or Update Security Solution",
"CheckType": [],
"ServiceName": "monitor",
"SubServiceName": "",
"ServiceName": "Monitor",
"SubServiceName": "Alert",
"ResourceIdTemplate": "",
"Severity": "high",
"ResourceType": "Monitor",
prowler/providers/azure/services/monitor/monitor_alert_create_update_sqlserver_fr/monitor_alert_create_update_sqlserver_fr.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "monitor_alert_create_update_sqlserver_fr",
"CheckTitle": "Ensure that Activity Log Alert exists for Create or Update SQL Server Firewall Rule",
"CheckType": [],
"ServiceName": "monitor",
"SubServiceName": "",
"ServiceName": "Monitor",
"SubServiceName": "Alert",
"ResourceIdTemplate": "",
"Severity": "high",
"ResourceType": "Monitor",
prowler/providers/azure/services/monitor/monitor_alert_delete_nsg/monitor_alert_delete_nsg.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "monitor_alert_delete_nsg",
"CheckTitle": "Ensure that Activity Log Alert exists for Delete Network Security Group",
"CheckType": [],
"ServiceName": "monitor",
"SubServiceName": "",
"ServiceName": "Monitor",
"SubServiceName": "Alert",
"ResourceIdTemplate": "",
"Severity": "high",
"ResourceType": "Monitor",
prowler/providers/azure/services/monitor/monitor_alert_delete_policy_assignment/monitor_alert_delete_policy_assignment.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "monitor_alert_delete_policy_assignment",
"CheckTitle": "Ensure that Activity Log Alert exists for Delete Policy Assignment",
"CheckType": [],
"ServiceName": "monitor",
"SubServiceName": "",
"ServiceName": "Monitor",
"SubServiceName": "Alert",
"ResourceIdTemplate": "",
"Severity": "high",
"ResourceType": "Monitor",
prowler/providers/azure/services/monitor/monitor_alert_delete_public_ip_address_rule/monitor_alert_delete_public_ip_address_rule.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "monitor_alert_delete_public_ip_address_rule",
"CheckTitle": "Ensure that Activity Log Alert exists for Delete Public IP Address rule",
"CheckType": [],
"ServiceName": "monitor",
"SubServiceName": "",
"ServiceName": "Monitor",
"SubServiceName": "Alert",
"ResourceIdTemplate": "",
"Severity": "high",
"ResourceType": "Monitor",
prowler/providers/azure/services/monitor/monitor_alert_delete_security_solution/monitor_alert_delete_security_solution.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "monitor_alert_delete_security_solution",
"CheckTitle": "Ensure that Activity Log Alert exists for Delete Security Solution",
"CheckType": [],
"ServiceName": "monitor",
"SubServiceName": "",
"ServiceName": "Monitor",
"SubServiceName": "Alert",
"ResourceIdTemplate": "",
"Severity": "high",
"ResourceType": "Monitor",
prowler/providers/azure/services/monitor/monitor_alert_delete_sqlserver_fr/monitor_alert_delete_sqlserver_fr.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "monitor_alert_delete_sqlserver_fr",
"CheckTitle": "Ensure that Activity Log Alert exists for Delete SQL Server Firewall Rule",
"CheckType": [],
"ServiceName": "monitor",
"SubServiceName": "",
"ServiceName": "Monitor",
"SubServiceName": "Alert",
"ResourceIdTemplate": "",
"Severity": "high",
"ResourceType": "Monitor",
prowler/providers/azure/services/monitor/monitor_diagnostic_setting_with_appropriate_categories/monitor_diagnostic_setting_with_appropriate_categories.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "monitor_diagnostic_setting_with_appropriate_categories",
"CheckTitle": "Ensure Diagnostic Setting captures appropriate categories",
"CheckType": [],
"ServiceName": "monitor",
"SubServiceName": "Configuring Diagnostic Settings",
"ServiceName": "Monitor",
"SubServiceName": "DiagnosticSettings",
"ResourceIdTemplate": "",
"Severity": "medium",
"ResourceType": "Monitor",
prowler/providers/azure/services/monitor/monitor_diagnostic_settings_exists/monitor_diagnostic_settings_exists.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "monitor_diagnostic_settings_exists",
"CheckTitle": "Ensure that a 'Diagnostic Setting' exists for Subscription Activity Logs ",
"CheckType": [],
"ServiceName": "monitor",
"SubServiceName": "",
"ServiceName": "Monitor",
"SubServiceName": "DiagnosticSettings",
"ResourceIdTemplate": "",
"Severity": "medium",
"ResourceType": "Monitor",
prowler/providers/azure/services/monitor/monitor_storage_account_with_activity_logs_cmk_encrypted/monitor_storage_account_with_activity_logs_cmk_encrypted.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "monitor_storage_account_with_activity_logs_cmk_encrypted",
"CheckTitle": "Ensure the storage account containing the container with activity logs is encrypted with Customer Managed Key",
"CheckType": [],
"ServiceName": "monitor",
"SubServiceName": "",
"ServiceName": "Monitor",
"SubServiceName": "StorageAccounts",
"ResourceIdTemplate": "",
"Severity": "medium",
"ResourceType": "Monitor",
prowler/providers/azure/services/monitor/monitor_storage_account_with_activity_logs_is_private/monitor_storage_account_with_activity_logs_is_private.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "monitor_storage_container_with_activity_logs_is_private",
"CheckTitle": "Ensure the Storage Container Storing the Activity Logs is not Publicly Accessible",
"CheckType": [],
"ServiceName": "monitor",
"SubServiceName": "",
"ServiceName": "Monitor",
"SubServiceName": "StorageAccounts",
"ResourceIdTemplate": "",
"Severity": "high",
"ResourceType": "Monitor",
prowler/providers/azure/services/mysql/mysql_flexible_server_audit_log_connection_activated/mysql_flexible_server_audit_log_connection_activated.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "mysql_flexible_server_audit_log_connection_activated",
"CheckTitle": "Ensure server parameter 'audit_log_events' has 'CONNECTION' set for MySQL Database Server",
"CheckType": [],
"ServiceName": "mysql",
"SubServiceName": "",
"ServiceName": "MySQL",
"SubServiceName": "flexibleServers",
"ResourceIdTemplate": "",
"Severity": "medium",
"ResourceType": "Microsoft.DBforMySQL/flexibleServers",
prowler/providers/azure/services/mysql/mysql_flexible_server_audit_log_enabled/mysql_flexible_server_audit_log_enabled.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "mysql_flexible_server_audit_log_enabled",
"CheckTitle": "Ensure server parameter 'audit_log_enabled' is set to 'ON' for MySQL Database Server",
"CheckType": [],
"ServiceName": "mysql",
"SubServiceName": "",
"ServiceName": "MySQL",
"SubServiceName": "flexibleServers",
"ResourceIdTemplate": "",
"Severity": "medium",
"ResourceType": "Microsoft.DBforMySQL/flexibleServers",
prowler/providers/azure/services/mysql/mysql_flexible_server_minimum_tls_version_12/mysql_flexible_server_minimum_tls_version_12.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "mysql_flexible_server_minimum_tls_version_12",
"CheckTitle": "Ensure 'TLS Version' is set to 'TLSV1.2' for MySQL flexible Database Server",
"CheckType": [],
"ServiceName": "mysql",
"SubServiceName": "",
"ServiceName": "MySQL",
"SubServiceName": "flexibleServers",
"ResourceIdTemplate": "",
"Severity": "high",
"ResourceType": "Microsoft.DBforMySQL/flexibleServers",
prowler/providers/azure/services/mysql/mysql_flexible_server_ssl_connection_enabled/mysql_flexible_server_ssl_connection_enabled.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "mysql_flexible_server_ssl_connection_enabled",
"CheckTitle": "Ensure 'Enforce SSL connection' is set to 'Enabled' for Standard MySQL Database Server",
"CheckType": [],
"ServiceName": "mysql",
"SubServiceName": "",
"ServiceName": "MySQL",
"SubServiceName": "flexibleServers",
"ResourceIdTemplate": "",
"Severity": "high",
"ResourceType": "Microsoft.DBforMySQL/flexibleServers",
prowler/providers/azure/services/network/network_bastion_host_exists/network_bastion_host_exists.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "network_bastion_host_exists",
"CheckTitle": "Ensure an Azure Bastion Host Exists",
"CheckType": [],
"ServiceName": "network",
"SubServiceName": "",
"ServiceName": "Network",
"SubServiceName": "Bastions",
"ResourceIdTemplate": "",
"Severity": "medium",
"ResourceType": "Network",
prowler/providers/azure/services/network/network_flow_log_captured_sent/network_flow_log_captured_sent.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "network_flow_log_captured_sent",
"CheckTitle": "Ensure that network flow logs are captured and fed into a central log analytics workspace.",
"CheckType": [],
"ServiceName": "network",
"SubServiceName": "",
"ServiceName": "Network",
"SubServiceName": "FlowLogs",
"ResourceIdTemplate": "",
"Severity": "high",
"ResourceType": "Network",
prowler/providers/azure/services/network/network_flow_log_more_than_90_days/network_flow_log_more_than_90_days.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "network_flow_log_more_than_90_days",
"CheckTitle": "Ensure that Network Security Group Flow Log retention period is 'greater than 90 days'",
"CheckType": [],
"ServiceName": "network",
"SubServiceName": "",
"ServiceName": "Network",
"SubServiceName": "FlowLogs",
"ResourceIdTemplate": "",
"Severity": "medium",
"ResourceType": "Network",
prowler/providers/azure/services/network/network_http_internet_access_restricted/network_http_internet_access_restricted.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "network_http_internet_access_restricted",
"CheckTitle": "Ensure that HTTP(S) access from the Internet is evaluated and restricted",
"CheckType": [],
"ServiceName": "network",
"ServiceName": "Network",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/network/network_public_ip_shodan/network_public_ip_shodan.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "network_public_ip_shodan",
"CheckTitle": "Check if an Azure Public IP is exposed in Shodan (requires Shodan API KEY).",
"CheckType": [],
"ServiceName": "network",
"ServiceName": "Network",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/network/network_rdp_internet_access_restricted/network_rdp_internet_access_restricted.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "network_rdp_internet_access_restricted",
"CheckTitle": "Ensure that RDP access from the Internet is evaluated and restricted",
"CheckType": [],
"ServiceName": "network",
"ServiceName": "Network",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/network/network_ssh_internet_access_restricted/network_ssh_internet_access_restricted.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "network_ssh_internet_access_restricted",
"CheckTitle": "Ensure that SSH access from the Internet is evaluated and restricted",
"CheckType": [],
"ServiceName": "network",
"ServiceName": "Network",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/network/network_udp_internet_access_restricted/network_udp_internet_access_restricted.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "network_udp_internet_access_restricted",
"CheckTitle": "Ensure that UDP access from the Internet is evaluated and restricted",
"CheckType": [],
"ServiceName": "network",
"ServiceName": "Network",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "high",
prowler/providers/azure/services/network/network_watcher_enabled/network_watcher_enabled.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "network_watcher_enabled",
"CheckTitle": "Ensure that Network Watcher is 'Enabled'",
"CheckType": [],
"ServiceName": "network",
"SubServiceName": "",
"ServiceName": "Network",
"SubServiceName": "NetworkWatcher",
"ResourceIdTemplate": "",
"Severity": "medium",
"ResourceType": "Network",
prowler/providers/azure/services/policy/policy_ensure_asc_enforcement_enabled/policy_ensure_asc_enforcement_enabled.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "policy_ensure_asc_enforcement_enabled",
"CheckTitle": "Ensure Any of the ASC Default Policy Settings are Not Set to 'Disabled'",
"CheckType": [],
"ServiceName": "policy",
"ServiceName": "Policy",
"SubServiceName": "",
"ResourceIdTemplate": "",
"Severity": "medium",
prowler/providers/azure/services/postgresql/postgresql_flexible_server_allow_access_services_disabled/postgresql_flexible_server_allow_access_services_disabled.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "postgresql_flexible_server_allow_access_services_disabled",
"CheckTitle": "Ensure 'Allow access to Azure services' for PostgreSQL Database Server is disabled",
"CheckType": [],
"ServiceName": "postgresql",
"SubServiceName": "",
"ServiceName": "Postgresql",
"SubServiceName": "FlexibleServer",
"ResourceIdTemplate": "",
"Severity": "medium",
"ResourceType": "PostgreSQL",
prowler/providers/azure/services/postgresql/postgresql_flexible_server_connection_throttling_on/postgresql_flexible_server_connection_throttling_on.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "postgresql_flexible_server_connection_throttling_on",
"CheckTitle": "Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server",
"CheckType": [],
"ServiceName": "postgresql",
"SubServiceName": "",
"ServiceName": "Postgresql",
"SubServiceName": "FlexibleServer",
"ResourceIdTemplate": "",
"Severity": "medium",
"ResourceType": "PostgreSQL",
prowler/providers/azure/services/postgresql/postgresql_flexible_server_enforce_ssl_enabled/postgresql_flexible_server_enforce_ssl_enabled.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "postgresql_flexible_server_enforce_ssl_enabled",
"CheckTitle": "Ensure 'Enforce SSL connection' is set to 'ENABLED' for PostgreSQL Database Server",
"CheckType": [],
"ServiceName": "postgresql",
"SubServiceName": "",
"ServiceName": "Postgresql",
"SubServiceName": "FlexibleServer",
"ResourceIdTemplate": "",
"Severity": "medium",
"ResourceType": "PostgreSQL",

Some files were not shown because too many files have changed in this diff Show More