Ensure Private Endpoints Are Used for Azure Database for PostgreSQL
Skills in this repository
CyberStrikeus/CyberStrike - Page 171
SkillsMP has collected 7,442 skills from CyberStrikeus/CyberStrike. Open a skill to review its source and details.
CyberStrikeus/CyberStrikeShowing 40 of 7,442 collected skills.
Ensure server parameter 'connection_throttle.enable' is set to 'ON' for PostgreSQL server
Ensure server parameter 'logfiles.retention_days' is greater than 3 days for PostgreSQL server
Ensure server parameter 'log_checkpoints' is set to 'ON' for PostgreSQL server
Ensure server parameter 'log_disconnections' is set to 'ON' for PostgreSQL servers
Ensure server parameter 'log_connections' is set to 'ON' for PostgreSQL servers
Ensure that 'Auditing' is set to 'On'
Ensure that 'Public Network Access' is set to 'Disable'
Ensure no Azure SQL Database firewall rule is overly permissive
Ensure SQL server's Transparent Data Encryption (TDE) protector is encrypted with Customer-managed key
Ensure that Microsoft Entra authentication is Configured for SQL Servers
Ensure that 'Data encryption' is set to 'On' on a SQL Database
Ensure that 'Auditing' Retention is 'greater than 90 days'
Ensure 'Minimum TLS Version' is set to 'TLS 1.2' or higher
Ensure Azure Databricks is deployed in a customer-managed VNet
Ensure 'Allow Public Network Access' is set to 'Disabled'
Ensure private endpoints are used to access Azure Databricks workspaces
Ensure network security groups are configured for Databricks subnets
Ensure traffic is encrypted between cluster worker nodes
Ensure users and groups are synced from Microsoft Entra ID to Azure Databricks
Ensure Unity Catalog is configured for Azure Databricks
Ensure usage is restricted and expiry is enforced for Databricks personal access tokens
Ensure diagnostic log delivery is configured for Azure Databricks
Ensure critical data in Azure Databricks is encrypted with customer-managed keys (CMK)
Ensure 'No Public IP' is set to 'Enabled'
Ensure only MFA enabled identities can access privileged Virtual Machine
Ensure 'security defaults' is enabled in Microsoft Entra ID
Ensure 'multifactor authentication' is 'enabled' for all users
Ensure 'Allow users to remember multifactor authentication on devices they trust' is disabled
Ensure 'Notify users on password resets?' is set to 'Yes'
Ensure 'Notify all admins when other admins reset their password?' is set to 'Yes'
Ensure 'User consent for applications' is set to 'Do not allow user consent'
Ensure 'User consent for applications' is set to 'Allow user consent for apps from verified publishers, for selected permissions'
Ensure 'Users can register applications' is set to 'No'
Ensure 'Guest users access restrictions' is set to 'Guest user access is restricted to properties and memberships of their own directory objects'
Ensure 'Guest invite restrictions' is set to 'Only users assigned to specific admin roles can invite guest users' or 'No one in the organization can invite guest users'
Ensure 'Restrict access to Microsoft Entra admin center' is set to 'Yes'
Ensure 'Restrict user ability to access groups features in My Groups' is set to 'Yes'
Ensure 'Users can create security groups in Azure portals, API or PowerShell' is set to 'No'
Ensure 'trusted locations' are defined