turbot/azure_compliance

Control: 1.14 Ensure that 'Guests can invite' is set to 'No'

Description

Restrict guest being able to invite other guests to collaborate with your organization.

Restricting invitations to administrators ensures that only authorized accounts have access to cloud resources. This helps to maintain "Need to Know" permissions and prevents inadvertent access to data.

Remediation

From Console

  1. Log in to Azure Active Directory
  2. Go to External Identities
  3. Go to External collaboration settings
  4. Ensure that Guests can invite is set to No

Note: By default, Guests can invite is set to Yes.

Usage

steampipe check azure_compliance.control.cis_v130_1_14

SQL

This control uses a named query:

ad_manual_control

Tags