azure_compliance

Azure Compliance

Disabling local authentication methods improves security by ensuring that Cognitive Services accounts require Azure Active Directory identities exclusively for authentication.

cognitive_service_local_auth_disabled

nist_sp_800_171_rev_2_3_1_1

3.1.1 Limit system access to authorized users, processes acting on behalf of authorized users, and devices (including other systems)

nist_sp_800_171_rev_2_3_1_2

3.1.2 Limit system access to the types of transactions and functions that authorized users are permitted to execute

nist_sp_800_171_rev_2_3_1_3

3.1.3 Control the flow of CUI in accordance with approved authorizations

nist_sp_800_171_rev_2_3_13_1

3.13.1 Monitor, control, and protect communications (i.e., information transmitted or received by organizational systems) at the external boundaries and key internal boundaries of organizational systems

nist_sp_800_171_rev_2_3_13_2

3.13.2 Employ architectural designs, software development techniques, and systems engineering principles that promote effective information security within organizational systems

nist_sp_800_171_rev_2_3_13_5

3.13.5 Implement subnetworks for publicly accessible system components that are physically or logically separated from internal networks

nist_sp_800_171_rev_2_3_13_6

3.13.6 Deny network communications traffic by default and allow network communications traffic by exception (i.e., deny all, permit by exception)

nist_sp_800_171_rev_2_3_5_1

3.5.1 Identify system users, processes acting on behalf of users, and devices

nist_sp_800_171_rev_2_3_5_2

3.5.2 Authenticate (or verify) the identities of users, processes, or devices, as a prerequisite to allowing access to organizational systems.

nist_sp_800_171_rev_2_3_5_5

3.5.5 Prevent reuse of identifiers for a defined period

nist_sp_800_171_rev_2_3_5_6

3.5.6 Disable identifiers after a defined period of inactivity

nist_sp_800_53_rev_5_ac_3

Access Enforcement (AC-3)

nist_sp_800_53_rev_5_ac_2

Account Management (AC-2)

nist_sp_800_53_rev_5_ac_2_1

Automated System Account Management AC-2(1)

all_controls_cognitiveservice

Cognitive Services

nist_sp_800_53_rev_5_ia_2

Identification and Authentication (organizational Users) (IA-2)

nist_sp_800_53_rev_5_ia_4

Identifier Management (IA-4)

nist_sp_800_53_rev_5_ac_2_7

Privileged User Accounts AC-2(7)

Cognitive Services accounts should have local authentication methods disabled

azure

azuread

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, HIPAA HITRUST, NIST, PCI DSS across all your Azure subscriptions using Powerpipe and Steampipe.

Apache License 2.0

steampipe-mod-azure-compliance

Control: Cognitive Services accounts should have local authentication methods disabled

Description

Usage

SQL

Tags