CIS Azure compute Services
22 articles
- Ensure ‘HTTPS Only’ is Enabled for Azure App Services
- Ensure App Service Authentication is set up for apps in Azure App Service
- Ensure ‘FTP State’ is Set to ‘FTPS Only’ or ‘Disabled’ for Azure App Services
- Ensure Web App is using the latest version of TLS encryption
- Ensure the web app has 'Client Certificates (Incoming client certificates)' set to 'On'
- Ensure that Register with Azure Active Directory is enabled on App Service
- Ensure ‘PHP Version’ in Use is Currently Supported for Azure Web Apps and App Services
- Ensure ‘Python Version’ in Use is Currently Supported for Azure Web Apps and App Services
- Ensure ‘Java Version’ in Use is Currently Supported for Azure Web Apps and App Services
- Ensure ‘HTTP/2’ is Enabled (‘HTTP20Enabled’ set to ‘true’) for Azure Web Apps and App Services (If in Use)
- Ensure Azure Key Vaults are Used to Store Secrets
- Ensure Private Virtual Networks are used for Azure Container Instances
- Ensure a Managed Identity is used for interactions with other Azure services
- Ensure the principle of least privilege is used when assigning roles to a Managed Identity
- Ensure SSL is configured for CycleCloud
- Ensure an Azure Bastion Host Exists
- Ensure Virtual Machines are utilizing Managed Disks
- Ensure that 'OS and Data' disks are encrypted with Customer Managed Key (CMK)
- Ensure that 'Unattached disks' are encrypted with 'Customer Managed Key' (CMK)
- Ensure Only Approved Extensions Are Installed on Azure Virtual Machines
- Ensure that Endpoint Protection for all Virtual Machines is installed
- Ensure that Virtual Hard Disks (VHDs) are Encrypted