Azure / Azure/Azure-Verified-Modules

AzAdvertizer data changes detected

Open
#2,577 1 comment 0 reactions 0 assignees View on GitHub
Needs: Triage :mag:
Dominant language
PowerShell
Stars
580
Forks
161
Avg merge
11h 3m
Merged PRs (30d)
15

Description

Azure Advertizer Data Diff Report

Resource Type: microsoft.network/azurefirewalls
--------------------------------------------------
New APRL Recommendations:
- [Monitor "AZFW Latency Probe" metric](https://azure.github.io/Azure-Proactive-Resiliency-Library-v2/azure-resources/Network/azureFirewalls/#monitor-azfw-latency-probe-metric)

Resource Type: microsoft.search/searchservices
--------------------------------------------------
New Advisor Recommendations:
- [Bing Search APIs are retiring](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/bc416431-6245-4337-97b5-de1761692866)

Resource Type: microsoft.security/awsresource
--------------------------------------------------
New Advisor Recommendations:
- [Avoid the use of the "root" account](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/a47a6c3b-0629-406c-ad09-d91f7d9f78a3)
- [IAM policies that allow full "*:*" administrative privileges should not be created](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/1d08b362-7e24-46b0-bed1-4a6c1d1526a5)
- [Missing deny-all network ACL on VPC](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/fa61f9de-189a-4870-8314-1882309cd65b)
- [Restricted access should be configured on VPC security groups](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/8bf56ace-5d2e-4836-8b70-66c5fa22dfd7)
- [Unauthorized internet gateway and egress-only internet gateway routes should be blocked on VPC route tables](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/ffdbde63-ffdc-4595-a3b8-bfb08057be3c)

Resource Type: microsoft.security/gcpresource
--------------------------------------------------
New Advisor Recommendations:
- [Public IP address should be disabled for AlloyDB instances](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/b41e1802-9664-42ab-8a9b-ca0a00271d34)
- [Authentication should be enabled for Memorystore for Redis instances](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/667a52f6-fa45-409c-925b-35dba4b21e7a)
- [IAM authentication should be enabled for Redis clusters](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/d8adf759-c67b-438a-a31a-98637c64f2a2)

Resource Type: microsoft.security/gcpresources
--------------------------------------------------
New Advisor Recommendations:
- [Custom service accounts should be configured on Cloud Run services](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/ae31537e-9910-4d3b-80b8-0920bee7b924)

Contributor guide

No contributing guide indexed for this repository

Research direction

Review the Azure Advertizer Data Diff Report and its linked APRL and Advisor recommendations first. Determine which repository artifact is expected to track these entries and confirm the intended update and validation steps with a maintainer, since no file, test, or completion criteria are named.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, azure, gcp
Domain
cloud, infrastructure, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.