feat(storage): add new check `storage_account_geo_redundant_enabled`
Context
This PR implements the CIS Azure Benchmark control 10.3.12: Ensure Redundancy is set to 'geo-redundant storage (GRS)' on critical Azure Storage Accounts (Automated), which falls under the Level 2 profile.
This control is designed for environments with higher security and availability requirements, particularly those that prioritize disaster recovery and business continuity.
Description
The change introduces an automated rule to verify that all Azure Storage Accounts are configured to use geo-redundant storage (GRS).
Checklist
- Are there new checks included in this PR? Yes / No
- If so, do we need to update permissions for the provider? Please review this carefully.
- [ ] Review if the code is being covered by tests.
- [ ] Review if code is being documented following this specification https://github.com/google/styleguide/blob/gh-pages/pyguide.md#38-comments-and-docstrings
- [ ] Review if backport is needed.
- [ ] Review if is needed to change the Readme.md
- [ ] Ensure new entries are added to CHANGELOG.md, if applicable.
API
- [ ] Verify if API specs need to be regenerated.
- [ ] Check if version updates are required (e.g., specs, Poetry, etc.).
- [ ] Ensure new entries are added to CHANGELOG.md, if applicable.
License
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
Codecov Report
:x: Patch coverage is 96.55172% with 1 line in your changes missing coverage. Please review.
:white_check_mark: Project coverage is 81.15%. Comparing base (1b73ab2) to head (c1aa5ea).
:warning: Report is 464 commits behind head on master.
Additional details and impacted files
@@ Coverage Diff @@
## master #7980 +/- ##
==========================================
+ Coverage 81.03% 81.15% +0.11%
==========================================
Files 263 267 +4
Lines 9455 9530 +75
==========================================
+ Hits 7662 7734 +72
- Misses 1793 1796 +3
| Flag | Coverage Δ | |
|---|---|---|
| prowler | 81.15% <96.55%> (+0.11%) |
:arrow_up: |
Flags with carried forward coverage won't be shown. Click here to find out more.
| Components | Coverage Δ | |
|---|---|---|
| prowler | 81.15% <96.55%> (+0.11%) |
:arrow_up: |
| api | ∅ <ø> (∅) |
:rocket: New features to boost your workflow:
- :snowflake: Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
- :package: JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.