Azure Compliance mod v1.5.0 - Added compute_vm_trust_launch_enabled and iam_conditional_access_trusted_location_configured controls to the All Controls benchmark
Jul 31, 2025•powerpipe
Enhancements
- Added new automated queries for the following manual CIS controls: (#317)
- cis_v150_1_2_1
- cis_v200_1_2_1
- cis_v200_5_1_7
- cis_v210_1_2_1
- cis_v210_5_1_6
- cis_v210_7_9
- cis_v300_2_2_1
- cis_v300_4_16
- cis_v300_6_1_6
- cis_v300_8_11
- Added compute_vm_trust_launch_enabled and iam_conditional_access_trusted_location_configured controls to the All Controls benchmark. (#317)
- Added variable support for App Service controls to improve configurability: (#317)
- appservice_web_app_latest_python_version - Configurable Python version validation for web app
- appservice_web_app_latest_java_version - Configurable Java version validation for web app
- appservice_function_app_latest_python_version - Configurable Python version validation for function app
- appservice_function_app_latest_java_version - Configurable Java version validation for function app
Bug fixes
- Fixed iam_global_administrator_max_5 query to correctly check for a minimum of 2 and a maximum of 5 administrators. (#318)
- Fixed cis_v300_3_1_4_2 control by removing the invalid query reference and marking it as manual. (#317)
- Fixed appservice_function_app_latest_java_version query to correctly check results for both Linux and Windows operating system function app. (#317)
- Fixed appservice_web_app_latest_java_version query to correctly check results for both Linux and Windows operating system web app. (#317)