zakirkun Azure Misconfiguration
Overview
Common Azure security misconfigurations:
- Public blob containers: Storage containers with anonymous read access
- Hardcoded connection strings: Storage/database connection strings with keys in code
- Overprivileged managed identity: Subscription-level contributor role
- No MFA for admin accounts: Admin accounts without MFA requirement
- NSG allowing all inbound: Network Security Groups open to internet
- Key Vault access policies too broad: Full access granted to many principals
Remediation
- Set Storage Account containers to private
- Use Managed Identity instead of hardcoded connection strings
- Apply Azure Policy to enforce security baselines
- Enable Microsoft Defender for Cloud