azure_compliance

Azure Compliance

Remote debugging requires inbound ports to be opened on an App Service app. Remote debugging should be turned off.

appservice_api_app_remote_debugging_disabled

hipaa_hitrust_v92_0912_09s1organizational

0912.09s1Organizational.4-09.s 09.08 Exchange of Information

hipaa_hitrust_v92_1194_01l2organizational

1194.01l2Organizational.2-01.l 01.04 Network Access Control

nist_sp_800_171_rev_2_3_1_1

3.1.1 Limit system access to authorized users, processes acting on behalf of authorized users, and devices (including other systems)

nist_sp_800_171_rev_2_3_1_12

3.1.12 Monitor and control remote access sessions

nist_sp_800_171_rev_2_3_1_2

3.1.2 Limit system access to the types of transactions and functions that authorized users are permitted to execute

nist_sp_800_171_rev_2_3_4_1

3.4.1 Establish and maintain baseline configurations and inventories of organizational systems (including hardware, software, firmware, and documentation) throughout the respective system development life cycles

nist_sp_800_171_rev_2_3_4_2

3.4.2 Establish and enforce security configuration settings for information technology products employed in organizational systems

fedramp_high_ac_17_1

AC-17(1) Automated Monitoring / Control

all_controls_appservice

App Service

fedramp_high_cm_6

Configuration Settings (CM-6)

nist_sp_800_53_rev_5_cm_6

nist_sp_800_53_rev_5_ac_17_1

Monitoring and Control AC-17(1)

nist_sp_800_53_rev_5_ac_17

Remote Access (AC-17)

fedramp_high_ac_17

rbi_itf_nbfc_v2017_it_information_and_cyber_security_3_1_b

Segregation of Functions-3.1.b

App Service apps should have remote debugging turned off

azure

azuread

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, HIPAA HITRUST, NIST, PCI DSS across all your Azure subscriptions using Powerpipe and Steampipe.

Apache License 2.0

steampipe-mod-azure-compliance

Control: App Service apps should have remote debugging turned off

Description

Usage

SQL

Tags