cisagov / ScubaGear

Automation to assess the state of your M365 tenant against CISA's baselines
https://www.cisa.gov/resources-tools/services/secure-cloud-business-applications-scuba-project
Creative Commons Zero v1.0 Universal
1.44k stars 203 forks source link

Update Azure Active Directoy, Azure AD, and AAD baseline references to Microsoft Entra ID equivalent #1176

Open ahuynhMITRE opened 1 week ago

ahuynhMITRE commented 1 week ago

๐Ÿ—ฃ Description

Updated Azure Activie Directoy, Azure AD, AAD references in the markdown files including unique IDs and references in other baselines to match the renaming of the M365 product.

๐Ÿ’ญ Motivation and context

This change is required in order to be up to date with how Microsoft references their products. Microsoft renamed Azure Active Directory (Azure AD) to Microsoft Entra ID to communicate the multicloud, multiplatform functionality of the products, alleviate confusion with Windows Server Active Directory, and unify the Microsoft Entra product family.

Closes issue #888 linked to #921

๐Ÿงช Testing

check each instance of Azure Active Directoy, Azure AD, and AAD mentioned in the baselines are correctly replaced with their Microsoft Entra equivalent

โœ… Pre-approval checklist

โœ… Pre-merge checklist

โœ… Post-merge checklist

ahuynhMITRE commented 1 week ago

@buidav & @mitchelbaker-cisa for the unique IDs i originally changed MS.AAD to MS.ENTRAID but looking at Microsoft's documentation their prefered acronym replacement for AAD is ME-ID...

Link listed below. https://learn.microsoft.com/en-us/entra/fundamentals/new-name

open to changing it to ENTRAID to match the markdown file name and also not sure if the "-" breaks our automation for pulling unique IDs.

buidav commented 1 week ago

@buidav & @mitchelbaker-cisa for the unique IDs i originally changed MS.AAD to MS.ENTRAID but looking at Microsoft's documentation their prefered acronym replacement for AAD is ME-ID...

Link listed below. https://learn.microsoft.com/en-us/entra/fundamentals/new-name

open to changing it to ENTRAID to match the markdown file name and also not sure if the "-" breaks our automation for pulling unique IDs.

We will have to think about the strategy and bumping major versions for i.e v1 to v2 for ScubaGear itself when changing the IDs now. This is a breaking change that will interrupt current workflows for folks.

buidav commented 4 days ago

@ahuynhMITRE For when you get back. Would recommend reverting the Policy identifiers back to MS.AAD for this PR. We'll have to make identifiers changes in a separate PR in the future. Changing the policy identifiers now would be too disruptive of current workflows.