CyberStrikeus/CyberStrike - Page 170

cis-azure-compute-20-9

Ensure only MFA enabled identities can access privileged Virtual Machine

cis-azure-compute-3-1

Ensure Private Virtual Networks are used for Container Instances

cis-azure-compute-3-2

Ensure a Managed Identity is used for interactions with other Azure services

cis-azure-compute-3-3

Ensure the principle of least privilege is used when assigning roles to a Managed Identity

cis-azure-compute-4-1

Ensure SSL is configured for CycleCloud

cis-azure-database-2-1

Ensure 'Microsoft Entra Authentication' is 'Enabled'

cis-azure-database-2-10

Ensure 'Update Channel' is set to 'Stable'

cis-azure-database-2-2

Ensure that 'Allow access only via SSL' is set to 'Yes'

cis-azure-database-2-3

Ensure that 'Minimum TLS version' is set to TLS v1.2 (or higher)

cis-azure-database-2-4

Ensure that 'Access Policies' are Implemented and Reviewed Periodically

cis-azure-database-2-5

Ensure that 'System Assigned Managed Identity' is set to 'On'

cis-azure-database-2-6

Ensure that 'Public Network Access' is 'Disabled'

cis-azure-database-2-7

Ensure Azure Cache for Redis is Using a Private Link

cis-azure-database-2-8

Ensure that Azure Cache for Redis is Using Customer-Managed Keys

cis-azure-database-2-9

Ensure 'Access Keys Authentication' is set to 'Disabled'

cis-azure-database-3-1

Ensure That 'Firewalls & Networks' Is Limited to Use Selected Networks Instead of All Networks

cis-azure-database-3-2

Ensure that Cosmos DB uses Private Endpoints where possible

cis-azure-database-3-3

Ensure that 'disableLocalAuth' is set to 'true'

cis-azure-database-3-4

Ensure 'Public Network Access' is 'Disabled'

cis-azure-database-3-5

Ensure critical data is encrypted with customer-managed keys (CMK)

cis-azure-database-3-6

Ensure the firewall does not allow all network traffic

cis-azure-database-3-7

Ensure that Cosmos DB Logging is Enabled

cis-azure-database-4-1

Ensure Data Factory is encrypted using Customer Managed Keys

cis-azure-database-4-2

Ensure Data Factory is using Managed Identities

cis-azure-database-4-3

Ensure that Data Factory is using Azure Key Vault to store Credentials and Secrets

cis-azure-database-4-4

Ensure that Data Factory is using RBAC to manage privilege assignment

cis-azure-database-5-1

Ensure Azure Database for MySQL uses Customer Managed Keys for Encryption at Rest

cis-azure-database-5-2

Ensure Azure Database for MySQL uses only Microsoft Entra Authentication

cis-azure-database-5-3

Ensure 'Public Network Access' is 'Disabled' for Azure Database for MySQL

cis-azure-database-5-4

Ensure Private Endpoints Are Used for Azure MySQL Databases

cis-azure-database-5-5

Ensure server parameter 'audit_log_enabled' is set to 'ON' for MySQL flexible server

cis-azure-database-5-6

Ensure server parameter 'audit_log_events' has 'CONNECTION' set for MySQL flexible server

cis-azure-database-5-7

Ensure server parameter 'error_server_log_file' is Enabled for MySQL Database Server

cis-azure-database-5-8

Ensure server parameter 'require_secure_transport' is set to 'ON' for MySQL Server

cis-azure-database-5-9

Ensure server parameter 'tls_version' is set to 'TLSv1.2' (or higher) for MySQL flexible server

cis-azure-database-6-1

Ensure Azure Database for PostgreSQL uses Customer Managed Keys for Encryption at Rest

cis-azure-database-6-10

Ensure server parameter 'require_secure_transport' is set to 'ON' for PostgreSQL server

cis-azure-database-6-11

Ensure server parameter 'ssl_min_protocol_version' is set to 'TLSv1.2' or higher for PostgreSQL server

cis-azure-database-6-2

Ensure Azure Database for PostgreSQL uses only Microsoft Entra Authentication

cis-azure-database-6-3

Ensure 'Public Network Access' is 'Disabled' for Azure Database for PostgreSQL