cloudmarker / cloudmarker / 1130

84%

push

travis-ci-com

Add AzStorageAccountAllowTrustedServicesEvent

Added `AzStorageAccountAllowTrustedServicesEvent` event plugin. This
plugin evaluates Azure storage accounts and generates an event if
Microsoft Azure services are not allowed access.

From `CIS Microsoft Azure Foundations Benchmark v1.1.0`:

Some Microsoft services that interact with storage accounts operate
from networks that can't be granted access through network rules. To
help this type of service work as intended, allow the set of trusted
Microsoft services to bypass the network rules. These services will
then use strong authentication to access the storage account. If the
Allow trusted Microsoft services exception is enabled, the following
services: Azure Backup, Azure Site Recovery, Azure DevTest Labs,
Azure Event Grid, Azure Event Hubs, Azure Networking, Azure Monitor
and Azure SQL Data Warehouse (when registered in the subscription),
are granted access to the storage account.

559 of 760 branches covered (73.55%)

Branch coverage included in aggregate %.

3453 of 4318 relevant lines covered (79.97%)

1.6 hits per line