Azure Compliance mod v1.5.0 - Added compute_vm_trust_launch_enabled and iam_conditional_access_trusted_location_configured controls to the All Controls benchmark

Jul 31, 2025powerpipe

Enhancements

  • Added new automated queries for the following manual CIS controls: (#317)
    • cis_v150_1_2_1
    • cis_v200_1_2_1
    • cis_v200_5_1_7
    • cis_v210_1_2_1
    • cis_v210_5_1_6
    • cis_v210_7_9
    • cis_v300_2_2_1
    • cis_v300_4_16
    • cis_v300_6_1_6
    • cis_v300_8_11
  • Added compute_vm_trust_launch_enabled and iam_conditional_access_trusted_location_configured controls to the All Controls benchmark. (#317)
  • Added variable support for App Service controls to improve configurability: (#317)
    • appservice_web_app_latest_python_version - Configurable Python version validation for web app
    • appservice_web_app_latest_java_version - Configurable Java version validation for web app
    • appservice_function_app_latest_python_version - Configurable Python version validation for function app
    • appservice_function_app_latest_java_version - Configurable Java version validation for function app

Bug fixes

  • Fixed iam_global_administrator_max_5 query to correctly check for a minimum of 2 and a maximum of 5 administrators. (#318)
  • Fixed cis_v300_3_1_4_2 control by removing the invalid query reference and marking it as manual. (#317)
  • Fixed appservice_function_app_latest_java_version query to correctly check results for both Linux and Windows operating system function app. (#317)
  • Fixed appservice_web_app_latest_java_version query to correctly check results for both Linux and Windows operating system web app. (#317)