CyberStrikeus/CyberStrike - Seite 171

cis-azure-database-6-4

Ensure Private Endpoints Are Used for Azure Database for PostgreSQL

Quellsprache: Englisch

cis-azure-database-6-5

Ensure server parameter 'connection_throttle.enable' is set to 'ON' for PostgreSQL server

Quellsprache: Englisch

cis-azure-database-6-6

Ensure server parameter 'logfiles.retention_days' is greater than 3 days for PostgreSQL server

Quellsprache: Englisch

cis-azure-database-6-7

Ensure server parameter 'log_checkpoints' is set to 'ON' for PostgreSQL server

Quellsprache: Englisch

cis-azure-database-6-8

Ensure server parameter 'log_disconnections' is set to 'ON' for PostgreSQL servers

Quellsprache: Englisch

cis-azure-database-6-9

Ensure server parameter 'log_connections' is set to 'ON' for PostgreSQL servers

Quellsprache: Englisch

cis-azure-database-9-1

Ensure that 'Auditing' is set to 'On'

Quellsprache: Englisch

cis-azure-database-9-2

Ensure that 'Public Network Access' is set to 'Disable'

Quellsprache: Englisch

cis-azure-database-9-3

Ensure no Azure SQL Database firewall rule is overly permissive

Quellsprache: Englisch

cis-azure-database-9-4

Ensure SQL server's Transparent Data Encryption (TDE) protector is encrypted with Customer-managed key

Quellsprache: Englisch

cis-azure-database-9-5

Ensure that Microsoft Entra authentication is Configured for SQL Servers

Quellsprache: Englisch

cis-azure-database-9-6

Ensure that 'Data encryption' is set to 'On' on a SQL Database

Quellsprache: Englisch

cis-azure-database-9-7

Ensure that 'Auditing' Retention is 'greater than 90 days'

Quellsprache: Englisch

cis-azure-database-9-8

Ensure 'Minimum TLS Version' is set to 'TLS 1.2' or higher

Quellsprache: Englisch

cis-azure-foundations-2-1-1

Ensure Azure Databricks is deployed in a customer-managed VNet

Quellsprache: Englisch

cis-azure-foundations-2-1-10

Ensure 'Allow Public Network Access' is set to 'Disabled'

Quellsprache: Englisch

cis-azure-foundations-2-1-11

Ensure private endpoints are used to access Azure Databricks workspaces

Quellsprache: Englisch

cis-azure-foundations-2-1-2

Ensure network security groups are configured for Databricks subnets

Quellsprache: Englisch

cis-azure-foundations-2-1-3

Ensure traffic is encrypted between cluster worker nodes

Quellsprache: Englisch

cis-azure-foundations-2-1-4

Ensure users and groups are synced from Microsoft Entra ID to Azure Databricks

Quellsprache: Englisch

cis-azure-foundations-2-1-5

Ensure Unity Catalog is configured for Azure Databricks

Quellsprache: Englisch

cis-azure-foundations-2-1-6

Ensure usage is restricted and expiry is enforced for Databricks personal access tokens

Quellsprache: Englisch

cis-azure-foundations-2-1-7

Ensure diagnostic log delivery is configured for Azure Databricks

Quellsprache: Englisch

cis-azure-foundations-2-1-8

Ensure critical data in Azure Databricks is encrypted with customer-managed keys (CMK)

Quellsprache: Englisch

cis-azure-foundations-2-1-9

Ensure 'No Public IP' is set to 'Enabled'

Quellsprache: Englisch

cis-azure-foundations-3-1-1

Ensure only MFA enabled identities can access privileged Virtual Machine

Quellsprache: Englisch

cis-azure-foundations-5-1-1

Ensure 'security defaults' is enabled in Microsoft Entra ID

Quellsprache: Englisch

cis-azure-foundations-5-1-2

Ensure 'multifactor authentication' is 'enabled' for all users

Quellsprache: Englisch

cis-azure-foundations-5-1-3

Ensure 'Allow users to remember multifactor authentication on devices they trust' is disabled

Quellsprache: Englisch

cis-azure-foundations-5-10

Ensure 'Notify users on password resets?' is set to 'Yes'

Quellsprache: Englisch

cis-azure-foundations-5-11

Ensure 'Notify all admins when other admins reset their password?' is set to 'Yes'

Quellsprache: Englisch

cis-azure-foundations-5-12

Ensure 'User consent for applications' is set to 'Do not allow user consent'

Quellsprache: Englisch

cis-azure-foundations-5-13

Ensure 'User consent for applications' is set to 'Allow user consent for apps from verified publishers, for selected permissions'

Quellsprache: Englisch

cis-azure-foundations-5-14

Ensure 'Users can register applications' is set to 'No'

Quellsprache: Englisch

cis-azure-foundations-5-15

Ensure 'Guest users access restrictions' is set to 'Guest user access is restricted to properties and memberships of their own directory objects'

Quellsprache: Englisch

cis-azure-foundations-5-16

Ensure 'Guest invite restrictions' is set to 'Only users assigned to specific admin roles can invite guest users' or 'No one in the organization can invite guest users'

Quellsprache: Englisch

cis-azure-foundations-5-17

Ensure 'Restrict access to Microsoft Entra admin center' is set to 'Yes'

Quellsprache: Englisch

cis-azure-foundations-5-18

Ensure 'Restrict user ability to access groups features in My Groups' is set to 'Yes'

Quellsprache: Englisch

cis-azure-foundations-5-19

Ensure 'Users can create security groups in Azure portals, API or PowerShell' is set to 'No'

Quellsprache: Englisch

cis-azure-foundations-5-2-1

Ensure 'trusted locations' are defined

Quellsprache: Englisch