@cloudgraph/policy-pack-azure-cis-1.3.1 v1.16.0

CIS Microsoft Azure Foundations Benchmark 1.3.1

Policy Pack based on the Azure Foundations 1.3.1 benchmark provided by the Center for Internet Security (CIS)

First Steps

1. Install Cloud Graph CLI.
2. Set up the Azure Provider for CG with the cg init azure command.
3. Add Policy Pack for CIS Microsoft Azure Foundations benchmark using cg policy add azure-cis-1.3.1 command.
4. Execute the ruleset using the scan command cg scan azure.

5. Query the findings using the different options:

   5a. Querying findings by provider:

   query {
     queryazureFindings {
       CISFindings {
         id
         resourceId
         result
       }
     }
   }

   5b. Querying findings by specific benchmark:

   query {
     queryazureCISFindings {
       id
       resourceId
       result
     }
   }

   5c. Querying findings by resource:

   query {
     queryazureSecurityPricing {
       id
       CISFindings {
         id
         resourceId
         result
       }
     }
   }

Available Ruleset