NIST 800-53 Rev. 4 for Azure

4min

Policy Pack based on the 800-53 Rev. 4 benchmark provided by the The National Institute of Standards and Technology (NIST)﻿
First Steps
Install Cloud Graph CLI.
Set up the Azure Provider for CG with the cg init azure command.
Add Policy Pack NIST 800-53 Rev. 4 for Azure benchmark using cg policy add azure-nist-800-53-rev4 command.
Execute the ruleset using the scan command cg scan azure.
Query the findings using the different options:
Query findings by provider:
GraphQL
|
query {
  queryazureFindings {
    NISTFindings {
      id
      resourceId
      result
    }
  }
}
query {
  queryazureFindings {
    NISTFindings {
      id
      resourceId
      result
    }
  }
}
﻿
Query findings by specific benchmark:
GraphQL
|
query {
  queryazureNISTFindings {
    id
    resourceId
    result
  }
}
query {
  queryazureNISTFindings {
    id
    resourceId
    result
  }
}
﻿
Query findings by resource:
GraphQL
|
query {
  queryazureSecurityPricing {
    id
    NISTFindings {
      id
      resourceId
      result
    }
  }
}
query {
  queryazureSecurityPricing {
    id
    NISTFindings {
      id
      resourceId
      result
    }
  }
}
﻿
Available Ruleset
Please see the NIST 800-53 Rev. 4 README for a table of available rules.

Updated 03 Mar 2023

Did this page help you?

CIS Microsoft Azure Foundations Benchmark 1.3.1

PCI Data Security Standard V 3.2.1 for Azure

TABLE OF CONTENTS