cisagov / ScubaGear

Automation to assess the state of your M365 tenant against CISA's baselines
https://www.cisa.gov/resources-tools/services/secure-cloud-business-applications-scuba-project
Creative Commons Zero v1.0 Universal
1.47k stars 204 forks source link

Detect Microsoft License changes in code #430

Closed schrolla closed 5 months ago

schrolla commented 1 year ago

💡 Summary

Develop a set or series of functional tests to validate Microsoft M365 license information being returned by a tenant.

Motivation and context

A number of M365 features and services rely on a tenant and/or user having licenses to enable those features and several of the M365 secure baselines recommend settings that use those licensed features and services.

As licensing may be updated as services are renamed, changed, merged, and so on, it would be helpful to be able to detect those changes as it could potential break assessments of related services.

Having a set of tests that detects changes to license information returned from M365 APIs would allow the SCuBA project to more rapidly address any bugs in ScubaGear that result from routine changes to licensing information, such as license names.

Implementation notes

Please provide details for implementation, such as:

Acceptance criteria

schrolla commented 5 months ago

New automated and unit testing fills this need now.