search

SecurityFTW / cs-suite

Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.
GNU General Public License v3.0
1.14k stars 217 forks source link

Identity Access Mnagement is not working in Azure rest all is working as per CIS help needed immediately #32

Closed challs1 closed 5 years ago

challs1 commented 5 years ago

It was working for everything rather than For Identity Access Management in Azure

shivankar-madaan commented 5 years ago

Hi I didn't quite get issue, could you please elaborate further on it.

challs1 commented 5 years ago

@shivankar-madaan when I am able to run sudo python cs.py -env azure it was running from 2.1 to 8 but not from 1.0 which 1.0 is IAM it was not running IAM rules and rest of them are working as expected

shivankar-madaan commented 5 years ago

Oh.. Got it!!

We haven't implemented the Azure IAM rules, since most of checks are done manually You can verify that from the official CIS benchmark PDF from AZURE

https://azure.microsoft.com/mediahandler/files/resourcefiles/cis-microsoft-azure-foundations-security-benchmark/CIS_Microsoft_Azure_Foundations_Benchmark_v1.0.0.pdf

If you come across any document, which can help us implement it via code/automation, please let us know.

Thanks

challs1 commented 5 years ago

@shivankar-madaan : Oh okay will let u know if i have done anything and also when coming to SQL servers from 4.1.1 to4.1.8 was also not working let me know about these too? whether u guys are not implemented for SQL severs too and SQL databases was working as expected ???

shivankar-madaan commented 5 years ago

Yes you are right SQL servers are not yet part of the Azure audit. SQL databases has been implemented. Do let us know, if you face any issues or false positives

challs1 commented 5 years ago

@shivankar-madaan Perfect Thanks for your time and help we can close the issue.

shivankar-madaan commented 5 years ago

@challs1 happy to help!!