Azure Database for PostgreSQL flexible server should have Entra-only auth
Categories:
Frameworks:
less than a minute
Framework: Defender for Cloud Recommendations
Azure Key Vaults should use private link
Categories:
Frameworks:
less than a minute
Azure running container images should have vulnerabilities resolved
Categories:
Frameworks:
less than a minute
Container CPU and memory limits should be enforced
Categories:
Frameworks:
less than a minute
Container images should be deployed from trusted registries only
Categories:
Frameworks:
less than a minute
Container registries should not allow unrestricted network access
Categories:
Frameworks:
less than a minute
Container registries should use private link
Categories:
less than a minute
Container with privilege escalation should be avoided
Categories:
Frameworks:
less than a minute
Containers running in Azure should have vulnerability findings resolved
Categories:
Frameworks:
less than a minute
Containers sharing sensitive host namespaces should be avoided
Categories:
Frameworks:
less than a minute
Email notification for high severity alerts should be enabled
Categories:
Frameworks:
less than a minute
Immutable (read-only) root filesystem should be enforced for containers
Categories:
Frameworks:
less than a minute
Key vaults should have deletion protection enabled
Categories:
less than a minute
Kubernetes clusters should be accessible only over HTTPS
Categories:
Frameworks:
less than a minute
Kubernetes clusters should disable automounting API credentials
Categories:
Frameworks:
less than a minute
Least privileged Linux capabilities should be enforced for containers
Categories:
Frameworks:
less than a minute
Microsoft Defender CSPM should be enabled
Categories:
Frameworks:
less than a minute
Microsoft Defender for Resource Manager should be enabled
Categories:
Frameworks:
less than a minute
Microsoft Defender for Storage with Malware Scanning and Sensitive Data Threat Detection
Categories:
Frameworks:
less than a minute
Privileged containers should be avoided
Categories:
Frameworks:
less than a minute
Privileged roles should not have permanent access at subscription/RG level
Categories:
Frameworks:
less than a minute
Resource logs in Azure Databricks Workspaces should be enabled
Categories:
Frameworks:
less than a minute
Running containers as root user should be avoided
Categories:
Frameworks:
less than a minute
Service Principals should not be assigned administrative roles at sub/RG level
Categories:
Frameworks:
less than a minute
Services should listen on allowed ports only
Categories:
Frameworks:
less than a minute
Usage of host networking and ports should be restricted
Categories:
Frameworks:
less than a minute
Usage of pod HostPath volume mounts should be restricted
Categories:
Frameworks:
less than a minute
VMs and VMSS should have encryption at host enabled
Categories:
Frameworks:
less than a minute
Vulnerable AKS should be updated to resolve vulnerability findings
Categories:
Frameworks:
less than a minute