azure_compliance

Azure Compliance

Audit built-in roles such as 'Owner, Contributor, Reader' instead of custom RBAC roles, which are error prone. Using custom roles is treated as an exception and requires a rigorous review and threat modeling.

iam_no_custom_role

hipaa_hitrust_v92_1148_01c2system

1148.01c2System.78-01.c 01.02 Authorized Access to Information Systems

hipaa_hitrust_v92_1230_09c2organizational

1230.09c2Organizational.1-09.c 09.01 Documented Operating Procedures

nist_sp_800_53_rev_5_ac_2

Account Management (AC-2)

all_controls_activedirectory

Active Directory

nist_sp_800_53_rev_5_ac_6

Least Privilege (AC-6)

pci_dss_v321_requirement_3_2

PCI DSS requirement 3.2

pci_dss_v321_requirement_7_2_1

PCI DSS requirement 7.2.1

pci_dss_v321_requirement_8_3_1

PCI DSS requirement 8.3.1

nist_sp_800_53_rev_5_ac_2_7

Privileged User Accounts AC-2(7)

nist_sp_800_53_rev_5_ac_6_7

Review of User Privileges AC-6(7)

Audit usage of custom RBAC roles

azure

azuread

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, HIPAA HITRUST, NIST, PCI DSS across all your Azure subscriptions using Powerpipe and Steampipe.

Apache License 2.0

steampipe-mod-azure-compliance

Control: Audit usage of custom RBAC roles

Description

Usage

SQL

Tags