prowler-azure
Assess Azure security best practices, perform audits, compliance checks, and generate reports. tldr-pages
On several platforms
Several platforms
Run the default set of checks on the current Azure account using Azure CLI authentication
prowler azure --az-cli-authIdentifyRun checks for specific Azure subscriptions
prowler azure --az-cli-auth --subscription-ids subscription_id1 subscription_id2 ...IdentifyAuthenticate using a service principal via environment variables
prowler azure --sp-env-authIdentifyAuthenticate using browser login and specify a tenant ID
prowler azure --browser-auth --tenant-id "XXXXXXXX"IdentifyAuthenticate using a managed identity (e.g. for Azure VM)
prowler azure --managed-identity-authIdentifyRun checks for selected Azure services
prowler azure --services defenderIdentifyRun a specific Azure check
prowler azure --checks storage_blob_public_access_level_is_disabledIdentifyExclude specific checks or services
prowler azure --excluded-checks storage_blob_public_access_level_is_disabled --exclude-services defenderIdentify