Policy pack for Microsoft Cloud Security Benchmark

[olafurnielsen]

Hello!

• Vote on this issue by adding a 👍 reaction
• If you want to implement this feature, comment to let us know (we'll work with you on design, scheduling, etc.)

Issue details

The Microsoft cloud security benchmark has been published and is a new and updated (FKA Azure Security Benchmark) set of policies and recommendations which are consistent with and based on CIS, NIST & PCI benchmarks.

This also seems to be the default policy pack used in Microsoft Defender for Cloud recommendations.

Having this as a ready-to-go policy pack to use with Pulumi policy would be nothing less than amazing. As a bonus MCSB also includes policies targeted towards GCP and AWS so this could be hitting three birds with one stone!

Affected area/feature

• Pulumi Policy Packs