refactor: rename entra_ca_policy_identity_protection_sign_in_risk_enabled

This commit is contained in:
HugoPBrito committed 2025-03-13 20:42:59 +01:00
1 parent dab3ae4872
commit b39ec544cf
8 files changed
+42 -42

No files matched your search

@@ -1,6 +1,6 @@
{
"Provider": "microsoft365",
"CheckID": "entra_ca_policy_admin_portals_role_limited_access",
"CheckID": "entra_capolicy_admin_portals_role_limited_access",
"CheckTitle": "Ensure that only administrative roles have access to Microsoft Admin Portals",
"CheckType": [],
"ServiceName": "entra",
@@ -7,7 +7,7 @@ from prowler.providers.microsoft365.services.entra.entra_service import (
)
class entra_ca_policy_admin_portals_role_limited_access(Check):
class entra_capolicy_admin_portals_role_limited_access(Check):
"""Check if Conditional Access policies deny access to the Microsoft 365 admin center for users with limited access roles.
This check ensures that Conditional Access policies are in place to deny access to the Microsoft 365 admin center for users with limited access roles.
@@ -1,6 +1,6 @@
{
"Provider": "microsoft365",
"CheckID": "entra_ca_policy_identity_protection_sign_in_risk_enabled",
"CheckID": "entra_capolicy_identity_protection_sign_in_risk_enabled",
"CheckTitle": "Ensure that Identity Protection sign-in risk policies are enabled",
"CheckType": [],
"ServiceName": "entra",
@@ -8,7 +8,7 @@ from prowler.providers.microsoft365.services.entra.entra_service import (
)
class entra_ca_policy_identity_protection_sign_in_risk_enabled(Check):
class entra_capolicy_identity_protection_sign_in_risk_enabled(Check):
"""Check if at least one Conditional Access policy is a Identity Protection sign-in risk policy.
This check ensures that at least one Conditional Access policy is a Identity Protection sign-in risk policy.
@@ -20,7 +20,7 @@ from tests.providers.microsoft365.microsoft365_fixtures import (
)
class Test_entra_ca_policy_admin_portals_role_limited_access:
class Test_entra_capolicy_admin_portals_role_limited_access:
def test_entra_no_conditional_access_policies(self):
entra_client = mock.MagicMock
entra_client.audited_tenant = "audited_tenant"
@@ -31,17 +31,17 @@ class Test_entra_ca_policy_admin_portals_role_limited_access:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.entra.entra_ca_policy_admin_portals_role_limited_access.entra_ca_policy_admin_portals_role_limited_access.entra_client",
"prowler.providers.microsoft365.services.entra.entra_capolicy_admin_portals_role_limited_access.entra_capolicy_admin_portals_role_limited_access.entra_client",
new=entra_client,
),
):
from prowler.providers.microsoft365.services.entra.entra_ca_policy_admin_portals_role_limited_access.entra_ca_policy_admin_portals_role_limited_access import (
entra_ca_policy_admin_portals_role_limited_access,
from prowler.providers.microsoft365.services.entra.entra_capolicy_admin_portals_role_limited_access.entra_capolicy_admin_portals_role_limited_access import (
entra_capolicy_admin_portals_role_limited_access,
)
entra_client.conditional_access_policies = {}
check = entra_ca_policy_admin_portals_role_limited_access()
check = entra_capolicy_admin_portals_role_limited_access()
result = check.execute()
assert len(result) == 1
assert result[0].status == "FAIL"
@@ -66,12 +66,12 @@ class Test_entra_ca_policy_admin_portals_role_limited_access:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.entra.entra_ca_policy_admin_portals_role_limited_access.entra_ca_policy_admin_portals_role_limited_access.entra_client",
"prowler.providers.microsoft365.services.entra.entra_capolicy_admin_portals_role_limited_access.entra_capolicy_admin_portals_role_limited_access.entra_client",
new=entra_client,
),
):
from prowler.providers.microsoft365.services.entra.entra_ca_policy_admin_portals_role_limited_access.entra_ca_policy_admin_portals_role_limited_access import (
entra_ca_policy_admin_portals_role_limited_access,
from prowler.providers.microsoft365.services.entra.entra_capolicy_admin_portals_role_limited_access.entra_capolicy_admin_portals_role_limited_access import (
entra_capolicy_admin_portals_role_limited_access,
)
from prowler.providers.microsoft365.services.entra.entra_service import (
ConditionalAccessPolicy,
@@ -112,7 +112,7 @@ class Test_entra_ca_policy_admin_portals_role_limited_access:
)
}
check = entra_ca_policy_admin_portals_role_limited_access()
check = entra_capolicy_admin_portals_role_limited_access()
result = check.execute()
assert len(result) == 1
assert result[0].status == "FAIL"
@@ -138,12 +138,12 @@ class Test_entra_ca_policy_admin_portals_role_limited_access:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.entra.entra_ca_policy_admin_portals_role_limited_access.entra_ca_policy_admin_portals_role_limited_access.entra_client",
"prowler.providers.microsoft365.services.entra.entra_capolicy_admin_portals_role_limited_access.entra_capolicy_admin_portals_role_limited_access.entra_client",
new=entra_client,
),
):
from prowler.providers.microsoft365.services.entra.entra_ca_policy_admin_portals_role_limited_access.entra_ca_policy_admin_portals_role_limited_access import (
entra_ca_policy_admin_portals_role_limited_access,
from prowler.providers.microsoft365.services.entra.entra_capolicy_admin_portals_role_limited_access.entra_capolicy_admin_portals_role_limited_access import (
entra_capolicy_admin_portals_role_limited_access,
)
from prowler.providers.microsoft365.services.entra.entra_service import (
ConditionalAccessPolicy,
@@ -186,7 +186,7 @@ class Test_entra_ca_policy_admin_portals_role_limited_access:
)
}
check = entra_ca_policy_admin_portals_role_limited_access()
check = entra_capolicy_admin_portals_role_limited_access()
result = check.execute()
assert len(result) == 1
assert result[0].status == "FAIL"
@@ -215,12 +215,12 @@ class Test_entra_ca_policy_admin_portals_role_limited_access:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.entra.entra_ca_policy_admin_portals_role_limited_access.entra_ca_policy_admin_portals_role_limited_access.entra_client",
"prowler.providers.microsoft365.services.entra.entra_capolicy_admin_portals_role_limited_access.entra_capolicy_admin_portals_role_limited_access.entra_client",
new=entra_client,
),
):
from prowler.providers.microsoft365.services.entra.entra_ca_policy_admin_portals_role_limited_access.entra_ca_policy_admin_portals_role_limited_access import (
entra_ca_policy_admin_portals_role_limited_access,
from prowler.providers.microsoft365.services.entra.entra_capolicy_admin_portals_role_limited_access.entra_capolicy_admin_portals_role_limited_access import (
entra_capolicy_admin_portals_role_limited_access,
)
from prowler.providers.microsoft365.services.entra.entra_service import (
ConditionalAccessPolicy,
@@ -263,7 +263,7 @@ class Test_entra_ca_policy_admin_portals_role_limited_access:
)
}
check = entra_ca_policy_admin_portals_role_limited_access()
check = entra_capolicy_admin_portals_role_limited_access()
result = check.execute()
assert len(result) == 1
assert result[0].status == "PASS"
@@ -21,7 +21,7 @@ from tests.providers.microsoft365.microsoft365_fixtures import (
)
class Test_entra_ca_policy_identity_protection_sign_in_risk_enabled:
class Test_entra_capolicy_identity_protection_sign_in_risk_enabled:
def test_entra_no_conditional_access_policies(self):
entra_client = mock.MagicMock
entra_client.audited_tenant = "audited_tenant"
@@ -32,17 +32,17 @@ class Test_entra_ca_policy_identity_protection_sign_in_risk_enabled:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.entra.entra_ca_policy_identity_protection_sign_in_risk_enabled.entra_ca_policy_identity_protection_sign_in_risk_enabled.entra_client",
"prowler.providers.microsoft365.services.entra.entra_capolicy_identity_protection_sign_in_risk_enabled.entra_capolicy_identity_protection_sign_in_risk_enabled.entra_client",
new=entra_client,
),
):
from prowler.providers.microsoft365.services.entra.entra_ca_policy_identity_protection_sign_in_risk_enabled.entra_ca_policy_identity_protection_sign_in_risk_enabled import (
entra_ca_policy_identity_protection_sign_in_risk_enabled,
from prowler.providers.microsoft365.services.entra.entra_capolicy_identity_protection_sign_in_risk_enabled.entra_capolicy_identity_protection_sign_in_risk_enabled import (
entra_capolicy_identity_protection_sign_in_risk_enabled,
)
entra_client.conditional_access_policies = {}
check = entra_ca_policy_identity_protection_sign_in_risk_enabled()
check = entra_capolicy_identity_protection_sign_in_risk_enabled()
result = check.execute()
assert len(result) == 1
assert result[0].status == "FAIL"
@@ -67,12 +67,12 @@ class Test_entra_ca_policy_identity_protection_sign_in_risk_enabled:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.entra.entra_ca_policy_identity_protection_sign_in_risk_enabled.entra_ca_policy_identity_protection_sign_in_risk_enabled.entra_client",
"prowler.providers.microsoft365.services.entra.entra_capolicy_identity_protection_sign_in_risk_enabled.entra_capolicy_identity_protection_sign_in_risk_enabled.entra_client",
new=entra_client,
),
):
from prowler.providers.microsoft365.services.entra.entra_ca_policy_identity_protection_sign_in_risk_enabled.entra_ca_policy_identity_protection_sign_in_risk_enabled import (
entra_ca_policy_identity_protection_sign_in_risk_enabled,
from prowler.providers.microsoft365.services.entra.entra_capolicy_identity_protection_sign_in_risk_enabled.entra_capolicy_identity_protection_sign_in_risk_enabled import (
entra_capolicy_identity_protection_sign_in_risk_enabled,
)
from prowler.providers.microsoft365.services.entra.entra_service import (
ConditionalAccessPolicy,
@@ -115,7 +115,7 @@ class Test_entra_ca_policy_identity_protection_sign_in_risk_enabled:
)
}
check = entra_ca_policy_identity_protection_sign_in_risk_enabled()
check = entra_capolicy_identity_protection_sign_in_risk_enabled()
result = check.execute()
assert len(result) == 1
assert result[0].status == "FAIL"
@@ -141,12 +141,12 @@ class Test_entra_ca_policy_identity_protection_sign_in_risk_enabled:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.entra.entra_ca_policy_identity_protection_sign_in_risk_enabled.entra_ca_policy_identity_protection_sign_in_risk_enabled.entra_client",
"prowler.providers.microsoft365.services.entra.entra_capolicy_identity_protection_sign_in_risk_enabled.entra_capolicy_identity_protection_sign_in_risk_enabled.entra_client",
new=entra_client,
),
):
from prowler.providers.microsoft365.services.entra.entra_ca_policy_identity_protection_sign_in_risk_enabled.entra_ca_policy_identity_protection_sign_in_risk_enabled import (
entra_ca_policy_identity_protection_sign_in_risk_enabled,
from prowler.providers.microsoft365.services.entra.entra_capolicy_identity_protection_sign_in_risk_enabled.entra_capolicy_identity_protection_sign_in_risk_enabled import (
entra_capolicy_identity_protection_sign_in_risk_enabled,
)
from prowler.providers.microsoft365.services.entra.entra_service import (
ConditionalAccessPolicy,
@@ -194,7 +194,7 @@ class Test_entra_ca_policy_identity_protection_sign_in_risk_enabled:
)
}
check = entra_ca_policy_identity_protection_sign_in_risk_enabled()
check = entra_capolicy_identity_protection_sign_in_risk_enabled()
result = check.execute()
assert len(result) == 1
assert result[0].status == "FAIL"
@@ -223,12 +223,12 @@ class Test_entra_ca_policy_identity_protection_sign_in_risk_enabled:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.entra.entra_ca_policy_identity_protection_sign_in_risk_enabled.entra_ca_policy_identity_protection_sign_in_risk_enabled.entra_client",
"prowler.providers.microsoft365.services.entra.entra_capolicy_identity_protection_sign_in_risk_enabled.entra_capolicy_identity_protection_sign_in_risk_enabled.entra_client",
new=entra_client,
),
):
from prowler.providers.microsoft365.services.entra.entra_ca_policy_identity_protection_sign_in_risk_enabled.entra_ca_policy_identity_protection_sign_in_risk_enabled import (
entra_ca_policy_identity_protection_sign_in_risk_enabled,
from prowler.providers.microsoft365.services.entra.entra_capolicy_identity_protection_sign_in_risk_enabled.entra_capolicy_identity_protection_sign_in_risk_enabled import (
entra_capolicy_identity_protection_sign_in_risk_enabled,
)
from prowler.providers.microsoft365.services.entra.entra_service import (
ConditionalAccessPolicy,
@@ -276,7 +276,7 @@ class Test_entra_ca_policy_identity_protection_sign_in_risk_enabled:
)
}
check = entra_ca_policy_identity_protection_sign_in_risk_enabled()
check = entra_capolicy_identity_protection_sign_in_risk_enabled()
result = check.execute()
assert len(result) == 1
assert result[0].status == "FAIL"
@@ -305,12 +305,12 @@ class Test_entra_ca_policy_identity_protection_sign_in_risk_enabled:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.entra.entra_ca_policy_identity_protection_sign_in_risk_enabled.entra_ca_policy_identity_protection_sign_in_risk_enabled.entra_client",
"prowler.providers.microsoft365.services.entra.entra_capolicy_identity_protection_sign_in_risk_enabled.entra_capolicy_identity_protection_sign_in_risk_enabled.entra_client",
new=entra_client,
),
):
from prowler.providers.microsoft365.services.entra.entra_ca_policy_identity_protection_sign_in_risk_enabled.entra_ca_policy_identity_protection_sign_in_risk_enabled import (
entra_ca_policy_identity_protection_sign_in_risk_enabled,
from prowler.providers.microsoft365.services.entra.entra_capolicy_identity_protection_sign_in_risk_enabled.entra_capolicy_identity_protection_sign_in_risk_enabled import (
entra_capolicy_identity_protection_sign_in_risk_enabled,
)
from prowler.providers.microsoft365.services.entra.entra_service import (
ConditionalAccessPolicy,
@@ -358,7 +358,7 @@ class Test_entra_ca_policy_identity_protection_sign_in_risk_enabled:
)
}
check = entra_ca_policy_identity_protection_sign_in_risk_enabled()
check = entra_capolicy_identity_protection_sign_in_risk_enabled()
result = check.execute()
assert len(result) == 1
assert result[0].status == "PASS"