Turbot Guardrails Hub 
Hub
Mods
Azure
45
Mods
176
Resource Types
3,033
Policies
1,635
Controls
103
Quick Actions
102
IAM

Policy: Azure > CIS v4.0 > 10 - Storage Services > 10.03 - Storage Accounts > 10.03.03 - Identity and Access Management > 10.03.03.01 - Ensure 'Default to Microsoft Entra authorization' is 'Enabled'

Configures auditing against a CIS Benchmark item.

Level: 1

By default, the Azure portal uses Shared Key authorization to access blob and queue data. Enabling "Default to Microsoft Entra authorization" ensures that Azure AD is used by default for authorization instead of shared keys.

Using Azure AD authorization provides improved security through role-based access control (RBAC) and enables better audit logging of who accessed what data.

Primary Policy

This policy is used with the following primary policy:

Controls

Setting this policy configures this control:

Policy Specification

Schema Type
string
Default
Per Azure > CIS v4.0 > 10 - Storage Services > 10.03 - Storage Accounts > 10.03.03 - Identity and Access Management
Valid Values [YAML]
  • >-
  Per Azure > CIS v4.0 > 10 - Storage Services > 10.03 - Storage Accounts >
  10.03.03 - Identity and Access Management

  • Skip

  • Check: Benchmark

Category

In Your Workspace

Developers