mirror of
https://github.com/prowler-cloud/prowler.git
synced 2026-10-29 23:04:23 +00:00
46 lines
2.0 KiB
YAML
46 lines
2.0 KiB
YAML
### Account, Check and/or Region can be * to apply for all the cases.
|
||
### Account == Azure Subscription and Region == Azure Location
|
||
### Resources and tags are lists that can have either Regex or Keywords.
|
||
### Tags is an optional list that matches on tuples of 'key=value' and are "ANDed" together.
|
||
### Use an alternation Regex to match one of multiple tags with "ORed" logic.
|
||
### For each check you can except Accounts, Regions, Resources and/or Tags.
|
||
########################### MUTELIST EXAMPLE ###########################
|
||
Mutelist:
|
||
Accounts:
|
||
"Azure subscription 1":
|
||
Checks:
|
||
"sqlserver_tde_encryption_enabled":
|
||
Regions:
|
||
- "westeurope"
|
||
Resources:
|
||
- "sqlserver1" # Will ignore sqlserver1 in check sqlserver_tde_encryption_enabled located in westeurope
|
||
- "sqlserver2" # Will ignore sqlserver2 in check sqlserver_tde_encryption_enabled located in westeurope
|
||
Description: "Findings related with the check sqlserver_tde_encryption_enabled is muted for westeurope region and sqlserver1, sqlserver2 resources"
|
||
"defender_*":
|
||
Regions:
|
||
- "*"
|
||
Resources:
|
||
- "*" # Will ignore every Defender check in every location
|
||
"*":
|
||
Regions:
|
||
- "*"
|
||
Resources:
|
||
- "test"
|
||
Tags:
|
||
- "test=test" # Will ignore every resource containing the string "test" and the tags 'test=test' and
|
||
- "project=test|project=stage" # either of ('project=test' OR project=stage) in Azure subscription 1 and every location
|
||
|
||
"*":
|
||
Checks:
|
||
"vm_*":
|
||
Regions:
|
||
- "*"
|
||
Resources:
|
||
- "*"
|
||
Exceptions:
|
||
Accounts:
|
||
- "Subscription2"
|
||
Regions:
|
||
- "eastus"
|
||
- "eastus2" # Will ignore every resource in VM checks except the ones in Azure Subscription2 located in eastus or eastus2
|