azure_compliance

Azure Compliance

Use a managed identity for enhanced authentication security.

appservice_web_app_uses_managed_identity

nist_sp_800_171_rev_2_3_1_1

3.1.1 Limit system access to authorized users, processes acting on behalf of authorized users, and devices (including other systems)

nist_sp_800_171_rev_2_3_1_2

3.1.2 Limit system access to the types of transactions and functions that authorized users are permitted to execute

nist_sp_800_171_rev_2_3_5_1

3.5.1 Identify system users, processes acting on behalf of users, and devices

nist_sp_800_171_rev_2_3_5_2

3.5.2 Authenticate (or verify) the identities of users, processes, or devices, as a prerequisite to allowing access to organizational systems.

nist_sp_800_171_rev_2_3_5_5

3.5.5 Prevent reuse of identifiers for a defined period

nist_sp_800_171_rev_2_3_5_6

3.5.6 Disable identifiers after a defined period of inactivity

nist_sp_800_53_rev_5_ac_3

Access Enforcement (AC-3)

fedramp_high_ac_3

fedramp_high_ac_2

Account Management (AC-2)

nist_sp_800_53_rev_5_ac_2

all_controls_appservice

App Service

fedramp_high_ia_2

Identification and Authentication (Organizational users) (IA-2)

nist_sp_800_53_rev_5_ia_2

Identification and Authentication (organizational Users) (IA-2)

nist_sp_800_53_rev_5_ia_4

Identifier Management (IA-4)

fedramp_high_ia_4

App Service apps should use managed identity

azure

azuread

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, HIPAA HITRUST, NIST, PCI DSS across all your Azure subscriptions using Powerpipe and Steampipe.

Apache License 2.0

steampipe-mod-azure-compliance

Control: App Service apps should use managed identity

Description

Usage

SQL

Tags