rules/findings/azure/databricks/azure-databricks-groups-are-reviewed.json
|
{
"provider": "Azure", "serviceType": "Databricks", "serviceName": "Analytics Services", "displayName": "Ensure Azure Databricks groups are reviewed periodically", "description": "Groups are used in Role Based Access Control to apply permissions to users and should be audited.", "rationale": "Administrative overhead of user management. ", "impact": "If revoked improperly, applications relying on these tokens may fail, requiring a remediation plan for token rotation. Increased administrative effort is required to track and manage API tokens effectively.", "remediation": { "text": " ##### Remediate from Azure Portal 1. From Azure Home select Azure Databricks. 2. Select the Databricks implementation you wish to audit. 3. Select Access control (IAM). 4. Scroll down and select Add role assignment. 5. Search for the role you wish to add. Then select Next. 6. Select the group members you wish to add. Then select Next. 7. Review the info you have chosen, then select Review + assign. ", "code": { "powerShell": null, "iac": null, "terraform": null, "other": null } }, "recommendation": null, "references": [ "https://learn.microsoft.com/en-us/security/benchmark/azure/baselines/azure-databricks-security-baseline", "https://learn.microsoft.com/en-us/azure/databricks/security/auth/" ], "compliance": [ { "name": "CIS Microsoft Azure Foundations", "version": "6.0.0", "reference": "2.1.12", "profile": [ "Level 1" ] } ], "level": "medium", "tags": [], "rule": { "path": "", "subPath": null, "selectCondition": {}, "query": [ ], "shouldExist": null, "returnObject": null, "removeIfNotExists": null }, "output": { "html": { "data": { "properties": {}, "expandObject": null }, "table": "default", "decorate": [], "emphasis": [], "actions": { "objectData": { "properties": [], "expandObject": null, "limit": null }, "showGoToButton": "True", "showModalButton": "True", "directLink": null } }, "text": { "data": { "properties": {}, "expandObject": null }, "status": { "keyName": [ ], "message": "Ensure Azure Databricks groups are reviewed periodically", "defaultMessage": "Ensure Azure Databricks groups are reviewed periodically" }, "properties": { "resourceName": "name", "resourceId": "id", "resourceType": "type" }, "onlyStatus": false } }, "idSuffix": "azure_databricks_groups_not_reviewd", "notes": [], "categories": [], "immutable_properties": [ "name", "id" ], "id": "az_databricks_012" } |