cis-azure-storage-2.1.1.2
Ensure that shared access signature (SAS) tokens expire within an hour
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Ensure that shared access signature (SAS) tokens expire within an hour
Ensure stored access policies (SAP) are used when generating shared access signature (SAS) tokens
Ensure Critical Data is Encrypted with Microsoft Managed Keys (MMK)
Ensure Critical Data is Encrypted with Customer Managed Keys (CMK)
Ensure public network access is Disabled
Ensure Private Endpoints are used to access service
Ensure 'Key encryption key' is set to a customer-managed key for Azure Managed Lustre file systems
Ensure 'Use infrastructure encryption for this vault' is enabled on Backup vaults
Ensure 'Cross Region Restore' is set to 'Enabled' on Backup vaults
Ensure 'Cross Subscription Restore' is set to 'Disabled' or 'Permanently Disabled' on Backup vaults