detecting-azure-storage-account-misconfigurations

What problem does it solve?

Azure Storage accounts are frequently misconfigured, risking public exposure, weak encryption, and insecure network access. This skill automates detection of common misconfigurations across a subscription and provides actionable remediation guidance.

Core Features & Use Cases

• Public access detection: identify accounts and containers allowing public blob access or insecure network exposure.
• TLS and encryption checks: verify minimum TLS version, HTTPS enforcement, and encryption at rest for blobs and files.
• Network and key management: assess default network rules and key sources, with guidance on adopting customer-managed keys.
• Use Case: SOC analysts can generate a per-subscription security posture report highlighting high-risk storage accounts and containers for remediation.

Quick Start

Run the agent against your Azure subscription to produce a JSON report detailing findings and recommended mitigations.