Azure / Azure/Azure-Verified-Modules

AzAdvertizer data changes detected

Open
#2,763 1 comment 0 reactions 0 assignees View on GitHub
Needs: Triage :mag:
Dominant language
PowerShell
Stars
580
Forks
161
Avg merge
11h 3m
Merged PRs (30d)
15

Description

Azure Advertizer Data Diff Report

Resource Type: microsoft.network/azurefirewalls
--------------------------------------------------
New APRL Recommendations:
- [Monitor "AZFW Latency Probe" metric](https://azure.github.io/Azure-Proactive-Resiliency-Library-v2/azure-resources/Network/azureFirewalls/#monitor-azfw-latency-probe-metric)

Resource Type: microsoft.security/awsresource
--------------------------------------------------
New Advisor Recommendations:
- [Avoid the use of the "root" account](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/a47a6c3b-0629-406c-ad09-d91f7d9f78a3)
- [IAM policies that allow full "*:*" administrative privileges should not be created](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/1d08b362-7e24-46b0-bed1-4a6c1d1526a5)

Resource Type: microsoft.sql/servers/elasticpools
--------------------------------------------------
New Advisor Recommendations:
- [Enable zone redundancy for Azure SQL Elastic Pools](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/46cc1fcd-f1eb-4558-a7fb-22ba33f9e8e9)

Resource Type: microsoft.subscriptions/subscriptions
--------------------------------------------------
New Advisor Recommendations:
- [Guest accounts with read permissions on Azure resources should be removed](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/422107c6-5b9a-46a6-bb1d-26ef1cc52d65)
- [Guest accounts with write permissions on Azure resources should be removed](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/009678ce-adce-4c94-9cc8-cfc2bd0c6a06)
- [Guest accounts with owner permissions on Azure resources should be removed](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/f2864482-b329-4310-8c06-3cf74fe880c5)
- [Disabled accounts with read and write permissions on Azure resources should be removed](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/9b4f4dd4-24fc-42ba-9978-2a1cf575d36d)
- [Disabled accounts with owner permissions on Azure resources should be removed](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/a4899b81-b689-4e0d-aa29-45983ab8b7fc)

Contributor guide

No contributing guide indexed for this repository

Research direction

Review the Azure Advertizer diff in this issue and compare each listed resource type and recommendation with the repository's existing module or policy metadata. Start with the affected Azure Firewall, AWS resource, SQL elastic pool, and subscription entries; done means the repository reflects any confirmed changes and the relevant validation passes.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure
Domain
cloud, databases, infrastructure, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.