elastic / elastic/cloudbeat

[CIS Azure] Subscription scoped rules for CI

Open
#1,840 0 comments 0 reactions 0 assignees View on GitHub
CIS Azure cloudbeat Team:Cloud Security technical debt
Dominant language
Go
Stars
58
Forks
55
Avg merge
9h 9m
Merged PRs (30d)
424

Description

**Describe the bug**
Currently, we have a single subscription that we use in Azure for our team `csp-team`.
There are subscription scoped rules that we evaluate like (Logging and monitoring, Identity and access management, Bastions, Application insights).
In order to create passing and failing evaluations we would need to have multiple subscriptions to evaluate (one for each case).
This is why all of the subscription based test cases in the CI are currently commented out (the failed cases).
In addition to that we would need to have the necessary permissions to create CustomRoles on these subscriptions to evaluate Identity and access management rules.
We also would need to have a way to create basic SKU resources in these subscriptions (for rule 5.5).

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.