1. Assessment Phase

  • Azure Public Resource Exposure Assessment Execution
20 Credits

Azure Public Resource Exposure Report

Overview

This report reviews Public Resource Exposure across your selected Azure subscriptions using 52 enabled configuration and recommendation checks. It identifies affected resources and provides remediation guidance for failed checks.

Checks use the configuration and recommendations available for the selected subscriptions. Resources that cannot be evaluated are reported as unavailable or not applicable.

Assessment scope

  • App Service — 1 checks
  • Cognitive Services — 2 checks
  • Compute — 3 checks
  • Container Registry — 2 checks
  • Container Service — 2 checks
  • Data Factory — 1 checks
  • Databricks — 2 checks
  • EventGrid — 1 checks
  • KeyVault — 2 checks
  • MariaDB — 1 checks
  • Network — 24 checks
  • PostgreSQL — 4 checks
  • SQL — 2 checks
  • Search — 1 checks
  • Service Bus — 1 checks
  • Storage — 3 checks

Example checks

  • Azure Kubernetes Services Cluster Should Disable Public Access
  • Azure Kubernetes Services Cluster Nodes Should Prohibit Public Access
  • Function Apps Public Access is Restricted
  • Cognitive Services Accounts should Disable Public Network Access
  • Cognitive Services Accounts should Restrict Network Access

Upon completion, the report lists passed and failed checks, affected resources, unavailable evidence, and actionable remediation guidance.