Turbot Guardrails Hub 
Hub
  • Mods
  • Policy Packs
  • Docs
  • Home
ModsPolicy PacksDocsHome
Mods
Azure
Loading policies...

Policy: Azure > CIS v5.0 > 5 - Identity Services > 5.09 - Ensure that 'Number of days before users are asked to re-confirm their authentication information' is not set to '0' > Attestation

By setting this policy, you attest that you have manually verified that it complies with the relevant section of the CIS Benchmark.

From Azure Portal 1. From Azure Home select the Portal Menu 2. Select Microsoft Entra ID 3. Under Manage, select Users 4. Select Password reset 5. Under Settings, select Registration 6. Ensure Number of days before users are asked to re-confirm their authentication information is not set to 0

Once verified, enter the date that this attestation expires.

Targets

This policy targets the following resource types:

  • Azure > Active Directory > Directory

Primary Policy

This policy is used with the following primary policy:

  • Azure > CIS v5.0 > 5 - Identity Services > 5.09 - Ensure that 'Number of days before users are asked to re-confirm their authentication information' is not set to '0'

Controls

Setting this policy configures this control:

  • Azure > CIS v5.0 > 5 - Identity Services > 5.09 - Ensure that 'Number of days before users are asked to re-confirm their authentication information' is not set to '0'

Policy Specification

Schema Type
string

Category

  • CIS > Controls v7 > 16 Account Monitoring and Control > 16.10 Ensure All Accounts Have An Expiration Date

In Your Workspace

  • Policy Settings by Type report

Developers

    Category URI
    • tmod:@turbot/cis#/control/categories/v071610
  • Policy Type URI
    • tmod:@turbot/azure-cisv5-0#/policy/types/r0509Attestation
  • GraphQL
    • query policyType(id: "tmod:@turbot/azure-cisv5-0#/policy/types/r0509Attestation") { … }
    • query policySettings(filter: "policyTypeId:'tmod:@turbot/azure-cisv5-0#/policy/types/r0509Attestation'") { … }
    • query policyValues(filter: "policyTypeId:'tmod:@turbot/azure-cisv5-0#/policy/types/r0509Attestation'") { … }
  • CLI
    • Get Policy Type
    • turbot graphql policy-type --id "tmod:@turbot/azure-cisv5-0#/policy/types/r0509Attestation"
    • Get Policy Settings
    • turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/azure-cisv5-0#/policy/types/r0509Attestation"
Guardrails
Guardrails Hub
  • Hub
  • Docs
  • Blog
  • Changelog
Products
  • GuardrailsGuardrails
  • PipesPipes
  • SteampipeSteampipe
  • PowerpipePowerpipe
  • FlowpipeFlowpipe
  • TailpipeTailpipe
Turbot
  • Home
  • About us
  • We're hiring!
  • Contact us
Community

Our community of practitioners love to discuss cloud governance & security.

Slack logoJoin us on Slack →

System StatusLegalSecurity
Terms of UseSecurityPrivacy
50
Mods
207
Resource Types
3,612
Policies
1,957
Controls
103
Quick Actions
114
IAM