NIST 800-53 Rev. 4 for Azure

Policy Pack based on the 800-53 Rev. 4 benchmark provided by the The National Institute of Standards and Technology (NIST)

First Steps

1. Install Cloud Graph CLI.
2. Set up the Azure Provider for CG with the cg init azure command.
3. Add Policy Pack NIST 800-53 Rev. 4 for Azure benchmark using cg policy add azure-nist-800-53-rev4 command.
4. Execute the ruleset using the scan command cg scan azure.
5. Query the findings using the different options:

Query findings by provider:

query {
  queryazureFindings {
    NISTFindings {
      id
      resourceId
      result
    }
  }
}

Query findings by specific benchmark:

query {
  queryazureNISTFindings {
    id
    resourceId
    result
  }
}

Query findings by resource:

query {
  queryazureSecurityPricing {
    id
    NISTFindings {
      id
      resourceId
      result
    }
  }
}

Available Ruleset

Please see the NIST 800-53 Rev. 4 README for a table of available rules.