Azure / Azure/PSRule.Rules.Azure

[RULE] List Guest and Disabled accounts with Read and/or Write access to Azure subscription

Open
#3,239 0 comments 1 reaction 0 assignees View on GitHub
feature: in-flight-export pillar: operational-execellence
Dominant language
PowerShell
Stars
447
Forks
109
Avg merge
2d 19h
Merged PRs (30d)
23

Description

### Existing rule

_No response_

### Suggested rule

Exporting the list of current disabled and guest accounts with read or write access to resources using the Export-AzRuleData script will help customers understand that there are current security risks opened without proper governance in place. These risks are highlighted in Azure Advisor as high severity

### Pillar

Operational Excellence

### Additional context

This risk could be added to the security pillar in WAF, however as it's an operations activity, it could be also added to the operational excellence pillar.
https://learn.microsoft.com/en-us/azure/defender-for-cloud/managing-and-responding-alerts

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.