Skip to content
/ Azurefy Public

Automation for Azure Foundations CIS Benchmarks 3.0.0

License

GPL-3.0 license
1 star 0 forks Branches Tags Activity
Star
Notifications You must be signed in to change notification settings

Michaeladsl/Azurefy

BranchesTags

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

9 Commits
2.1.3 mfaforall.py
2.1.3 mfaforall.py
 
 
2.1.4 remembermfa.py
2.1.4 remembermfa.py
 
 
2.10 userpassresetnotification.py
2.10 userpassresetnotification.py
 
 
2.11 adminpasswordreset.py
2.11 adminpasswordreset.py
 
 
2.12 userappconsent.py
2.12 userappconsent.py
 
 
2.13 userappconsent.py
2.13 userappconsent.py
 
 
2.14 userappregistration.py
2.14 userappregistration.py
 
 
2.15 guestaccessrestrictions.py
2.15 guestaccessrestrictions.py
 
 
2.16 guestinvites.py
2.16 guestinvites.py
 
 
2.17 entraadmincenteraccess.py
2.17 entraadmincenteraccess.py
 
 
2.18 groupfeatureaccess.py
2.18 groupfeatureaccess.py
 
 
2.19 securitygroupcreation.py
2.19 securitygroupcreation.py
 
 
2.2.1 trusted locations.py
2.2.1 trusted locations.py
 
 
2.2.2-2.2.8 ConditionalAccessPolicies.py
2.2.2-2.2.8 ConditionalAccessPolicies.py
 
 
2.20 grouprequestmanagement.py
2.20 grouprequestmanagement.py
 
 
2.21 groupscreation.py
2.21 groupscreation.py
 
 
2.22 mfarequiredtojoin.py
2.22 mfarequiredtojoin.py
 
 
2.23 customsubscriptionadmin.py
2.23 customsubscriptionadmin.py
 
 
2.25 subingressandegress.py
2.25 subingressandegress.py
 
 
2.26 globaladmincount.py
2.26 globaladmincount.py
 
 
2.3 Tenant Creation.py
2.3 Tenant Creation.py
 
 
2.5 numberofmethodstoreset.py
2.5 numberofmethodstoreset.py
 
 
2.6 accountlockoutthreshold.py
2.6 accountlockoutthreshold.py
 
 
2.7 accountlockoutduration.py
2.7 accountlockoutduration.py
 
 
2.8 bannedpasswordlist.py
2.8 bannedpasswordlist.py
 
 
2.9 reconfirmauth.py
2.9 reconfirmauth.py
 
 
3.1.1.1 autoprovisioning.py
3.1.1.1 autoprovisioning.py
 
 
3.1.1.2 defendercloudappsint.py
3.1.1.2 defendercloudappsint.py
 
 
3.1.1.2+defenderforservices.py
3.1.1.2+defenderforservices.py
 
 
3.1.11 cloudsecbenchmark.py
3.1.11 cloudsecbenchmark.py
 
 
3.1.12 userwithfollowingrolesareowner.py
3.1.12 userwithfollowingrolesareowner.py
 
 
3.1.13 additionalemail.py
3.1.13 additionalemail.py
 
 
3.1.14 alertseverity.py
3.1.14 alertseverity.py
 
 
3.1.3.2 machinevulnasessment.py
3.1.3.2 machinevulnasessment.py
 
 
3.3.1 keyvaultRBAC.py
3.3.1 keyvaultRBAC.py
 
 
3.3.5 enablepurgeprotectionkeyvault.py
3.3.5 enablepurgeprotectionkeyvault.py
 
 
3.3.7 keyvaultprivateendpoints.py
3.3.7 keyvaultprivateendpoints.py
 
 
3.3.8 keyvaultkeyroation.py
3.3.8 keyvaultkeyroation.py
 
 
4.1 Securetransfer.py
4.1 Securetransfer.py
 
 
4.10 softdelete.py
4.10 softdelete.py
 
 
4.11 critstoragecmk.py
4.11 critstoragecmk.py
 
 
4.12-14 storagelogging.py
4.12-14 storagelogging.py
 
 
4.15 tlsversion.py
4.15 tlsversion.py
 
 
4.16 crosstenantreplication.py
4.16 crosstenantreplication.py
 
 
4.17 anonymousblobaccess.py
4.17 anonymousblobaccess.py
 
 
4.2 infrastructureencryption.py
4.2 infrastructureencryption.py
 
 
4.4 storagekeyrotation.py
4.4 storagekeyrotation.py
 
 
4.5 sharedaccesssignature.py
4.5 sharedaccesssignature.py
 
 
4.6 publicstorageaccess.py
4.6 publicstorageaccess.py
 
 
4.7 defaultnetworkaccess.py
4.7 defaultnetworkaccess.py
 
 
4.8 trustedazureservices.py
4.8 trustedazureservices.py
 
 
4.9 privateendpoints.py
4.9 privateendpoints.py
 
 
5.1.1 sqlauditing.py
5.1.1 sqlauditing.py
 
 
5.1.2 sqlpublicingress.py
5.1.2 sqlpublicingress.py
 
 
5.1.3 sqltdecmk.py
5.1.3 sqltdecmk.py
 
 
5.2.1 securetransportpostgressql.py
5.2.1 securetransportpostgressql.py
 
 
5.2.2 logcheckpointsforpostgressql.py
5.2.2 logcheckpointsforpostgressql.py
 
 
5.2.4 logfileretention.py
5.2.4 logfileretention.py
 
 
5.2.5 publicaccessTOpostgressql.py
5.2.5 publicaccessTOpostgressql.py
 
 
5.2.6 postgreslogconnections.py
5.2.6 postgreslogconnections.py
 
 
5.2.7 logdisconnections.py
5.2.7 logdisconnections.py
 
 
5.3.1 mysqlflexsecuretransport.py
5.3.1 mysqlflexsecuretransport.py
 
 
5.3.2 sqltlsversion.py
5.3.2 sqltlsversion.py
 
 
5.3.3 mysqlauditlogenabled.py
5.3.3 mysqlauditlogenabled.py
 
 
5.3.4 mysqlauditlogevents.py
5.3.4 mysqlauditlogevents.py
 
 
5.4.1 firewallandnetworksaccess.py
5.4.1 firewallandnetworksaccess.py
 
 
6.1.1 diagnostic settings.py
6.1.1 diagnostic settings.py
 
 
6.1.2 diagsettings categories.py
6.1.2 diagsettings categories.py
 
 
6.1.3 log container cmk.py
6.1.3 log container cmk.py
 
 
6.1.4 keyvaultlogging.py
6.1.4 keyvaultlogging.py
 
 
6.2.1 activitylogalerts.py
6.2.1 activitylogalerts.py
 
 
6.3.1 applicationinsights.py
6.3.1 applicationinsights.py
 
 
6.4 resource logging.py
6.4 resource logging.py
 
 
6.5 skubasicconsume.py
6.5 skubasicconsume.py
 
 
7.1 rdp access.py
7.1 rdp access.py
 
 
7.2 ssh access.py
7.2 ssh access.py
 
 
7.4 https.py
7.4 https.py
 
 
7.5 nsgretention.py
7.5 nsgretention.py
 
 
7.6 network watcher.py
7.6 network watcher.py
 
 
7.7 publicips.py
7.7 publicips.py
 
 
8.1 bastion.py
8.1 bastion.py
 
 
8.11 trustedlaunch.py
8.11 trustedlaunch.py
 
 
8.2 manageddisks.py
8.2 manageddisks.py
 
 
8.4 unattacheddiskcmk.py
8.4 unattacheddiskcmk.py
 
 
8.5 disknetworkaccess.py
8.5 disknetworkaccess.py
 
 
8.6 dataaccessauth.py
8.6 dataaccessauth.py
 
 
8.7 approvedextensions.py
8.7 approvedextensions.py
 
 
8.8 endpointprotection.py
8.8 endpointprotection.py
 
 
9.1 httpsonly.py
9.1 httpsonly.py
 
 
9.10 https20.py
9.10 https20.py
 
 
9.12 remotedebugging.py
9.12 remotedebugging.py
 
 
9.2 appserviceauth.py
9.2 appserviceauth.py
 
 
9.3 ftpsstate.py
9.3 ftpsstate.py
 
 
9.4 webapptls.py
9.4 webapptls.py
 
 
9.5 registerwithentraid.py
9.5 registerwithentraid.py
 
 
9.6 webappbasicauth.py
9.6 webappbasicauth.py
 
 
9.7 phpversion.py
9.7 phpversion.py
 
 
9.8 pythonversion.py
9.8 pythonversion.py
 
 
9.9 javaversion.py
9.9 javaversion.py
 
 
Azurefy.py
Azurefy.py
 
 

Repository files navigation

Azurefy

Automation for Azure Foundations CIS Benchmarks 3.0.0

Be sure to install and (optionally) run azure cli login before running script

az login

Run All Checks

Python3 Azurefy.py

Run Specific Script

Python3 Azurefy.py --script "check script name"

rKjJdScg8b

About

Automation for Azure Foundations CIS Benchmarks 3.0.0

Resources

Readme

License

GPL-3.0 license
Activity

Stars

1 star

Watchers

1 watching

Forks

0 forks
Report repository

Releases

No releases published

Packages

No packages published

Languages