erezrokah / azure

Official Azure security & compliance CloudQuery policy pack

Azure Security & Compliance CloudQuery policy pack

Official Azure security & compliance policy pack for CloudQuery.

What is CloudQuery

The open-source cloud asset inventory powered by SQL.

CloudQuery extracts, transforms, and loads your cloud assets into normalized PostgreSQL tables. CloudQuery enables you to assess, audit, and evaluate the configurations of your cloud assets.

Links

• Homepage: https://cloudquery.io
• Documentation: https://docs.cloudquery.io
• CloudQuery Hub (providers & policies documentation): https://hub.cloudquery.io/
• Discord: https://cloudquery.io/discord

Included Policies

• CIS v1.3.0
• HIPAA HITRUST 9.2

Quick Start

Prerequisite

1. Install CloudQuery

# install with brew
brew install cloudquery/tap/cloudquery
# or download precompiled binaries from https://github.com/cloudquery/cloudquery/releases

2. Download and Configure Azure Provider

cloudquery init azure

3. Fetch

# connect or run  a local PostgreSQL
docker run -p 5432:5432 -e POSTGRES_PASSWORD=pass -d postgres
# extract your cloud infra configuration
cloudquery fetch

Running

# Describe what is available in the policy pack
cloudquery policy describe azure

# Run the whole pack
cloudquery policy run azure

# Run specific policy
cloudquery policy run azure//cis_v1.3.0