Benchmark: PCI DSS requirement 6.6
Description
Ensure all public-facing web applications are protected against known attacks, either by performing application vulnerability assessment at least annually and after any changes, or by installing an automated technical solution that detects and prevents web-based attacks (for example, a web-application firewall) in front of public-facing web applications, to continually check all traffic.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-azure-complianceStart the Powerpipe server:
steampipe service startpowerpipe serverOpen http://localhost:9033 in your browser and select PCI DSS requirement 6.6.
Run this benchmark in your terminal:
powerpipe benchmark run azure_compliance.benchmark.pci_dss_v321_requirement_6_6Snapshot and share results via Turbot Pipes:
powerpipe benchmark run azure_compliance.benchmark.pci_dss_v321_requirement_6_6 --shareControls
- Monitor missing Endpoint Protection in Azure Security Center
- Vulnerabilities in security configuration on your machines should be remediated
- System updates should be installed on your machines
- A vulnerability assessment solution should be enabled on your virtual machines
- SQL databases should have vulnerability findings resolved