prowler icon indicating copy to clipboard operation
prowler copied to clipboard

feat(storage): add new check `storage_cross_tenant_replication_disabled`

Open HugoPBrito opened this issue 6 months ago • 1 comments

Context

This PR addresses the CIS Azure Benchmark control 10.3.8: Ensure 'Cross Tenant Replication' is not enabled (Automated), which is part of the Level 1 profile recommendations for secure configuration of Microsoft Azure.

The motivation for this change is to prevent the replication of data across different Azure tenants, which can pose significant security and compliance risks.

Description

This change introduces a compliance check to ensure that the Cross Tenant Replication feature is disabled within the Azure environment.

Checklist

  • Are there new checks included in this PR? Yes / No
    • If so, do we need to update permissions for the provider? Please review this carefully.
  • [ ] Review if the code is being covered by tests.
  • [ ] Review if code is being documented following this specification https://github.com/google/styleguide/blob/gh-pages/pyguide.md#38-comments-and-docstrings
  • [ ] Review if backport is needed.
  • [ ] Review if is needed to change the Readme.md
  • [ ] Ensure new entries are added to CHANGELOG.md, if applicable.

API

  • [ ] Verify if API specs need to be regenerated.
  • [ ] Check if version updates are required (e.g., specs, Poetry, etc.).
  • [ ] Ensure new entries are added to CHANGELOG.md, if applicable.

License

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

HugoPBrito avatar Jun 09 '25 11:06 HugoPBrito

Codecov Report

:white_check_mark: All modified and coverable lines are covered by tests. :white_check_mark: Project coverage is 81.06%. Comparing base (cc8f613) to head (3760144). :warning: Report is 465 commits behind head on master.

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #7977      +/-   ##
==========================================
+ Coverage   81.00%   81.06%   +0.06%     
==========================================
  Files         262      263       +1     
  Lines        9438     9455      +17     
==========================================
+ Hits         7645     7665      +20     
+ Misses       1793     1790       -3     
Flag Coverage Δ
prowler 81.06% <100.00%> (+0.06%) :arrow_up:

Flags with carried forward coverage won't be shown. Click here to find out more.

Components Coverage Δ
prowler 81.06% <100.00%> (+0.06%) :arrow_up:
api ∅ <ø> (∅)
:rocket: New features to boost your workflow:
  • :snowflake: Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • :package: JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

codecov[bot] avatar Jun 09 '25 11:06 codecov[bot]