ssc-spc-ccoe-cei / azure-guardrails-solution-accelerator

This implementation automates reporting to verify compliance with GC Cloud Guardrails. SSC and TBS review the results. Cette mise en œuvre automatise la production de rapports afin de vérifier la conformité aux mesures de sécurité infonuagique du GC. SPC et SCT examinent les résultats.
Other
7 stars 4 forks source link

[Enhancement] GR6 Data at Rest - added additional policy check and resource based compliance status #139

Closed dutt0 closed 2 months ago

dutt0 commented 3 months ago

Overview/Summary

This pull request introduces additional resource-based logic while determining the compliance status.

This PR fixes/adds/changes/removes

  1. Added two more policy checks ("Storage accounts should restrict network access" and "Secure transfer to storage accounts should be enabled") in the required PBMM policy
  2. Added additional resource-based logic while determining the compliance status. This change not only checks 'PBMM policy applied', But also finds the number of non-compliant resource(s) for any required policies and determines the compliance status of the resource based on non-compliant resources found.

Breaking Changes

None. However, users' compliance status may change.

Testing Evidence

image

As part of this Pull Request I have