Trigger - Azure Public Access Misconfiguration

Suggests a playbook that automatically remediates three high-severity misconfiguration issues caused by publicly accessible Azure Blob containers, overly permissive Azure VM disks, or Storage Accounts with default Allow network access.

Cloud Security Posture Management Playbooks

Details

IDdb2b912b8286de56121200b97129c49f
From Version8.11.0
Runs PlaybookAzure Public Access Misconfiguration - Auto-remediate
Suggestion ReasonAutomatically secure the publicly exposed Azure resource by disabling public access immediately.
{
  "trigger_id": "db2b912b8286de56121200b97129c49f",
  "trigger_name": "Trigger - Azure Public Access Misconfiguration",
  "playbook_id": "Azure Public Access Misconfiguration - Auto-remediate",
  "suggestion_reason": "Automatically secure the publicly exposed Azure resource by disabling public access immediately.",
  "description": "Suggests a playbook that automatically remediates three high-severity misconfiguration issues caused by publicly accessible Azure Blob containers, overly permissive Azure VM disks, or Storage Accounts with default Allow network access.",
  "alerts_filter": {
    "filter": {
        "OR": [
            {
            "SEARCH_FIELD": "matching_service_rule_id",
            "SEARCH_TYPE": "WILDCARD",
            "SEARCH_VALUE": "c085d057-d5a4-4118-afdf-f653e6b47995"
            },
            {
            "SEARCH_FIELD": "matching_service_rule_id",
            "SEARCH_TYPE": "WILDCARD",
            "SEARCH_VALUE": "6a3ba52c-1a0e-4359-aba5-e417ca280270"
            },
            {
            "SEARCH_FIELD": "matching_service_rule_id",
            "SEARCH_TYPE": "WILDCARD",
            "SEARCH_VALUE": "0c8ba0ca-2414-4d62-897c-4b57a291ae2b"
            }
        ]
        }
    },
    "fromVersion": "8.11.0"
}