cis-azure-foundations-5.25
Ensure 'Subscription leaving/entering Microsoft Entra tenant' is set to 'Permit no one'
☆1.21k repo stars⑂201 repo forks
DevOps & Security
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Ensure 'Subscription leaving/entering Microsoft Entra tenant' is set to 'Permit no one'
Ensure there are between 2 and 3 subscription owners
Ensure passwordless authentication methods are considered
Ensure Azure admin accounts are not used for daily operations
Ensure guest users are reviewed on a regular basis
Ensure use of the 'User Access Administrator' role is restricted
Ensure 'Tenant Creator' role assignments are periodically reviewed
Ensure all non-privileged role assignments are periodically reviewed
Ensure 'Restrict non-admin users from creating tenants' is set to 'Yes'
Ensure 'Number of methods required to reset' is set to '2'