Output Normalization and Compliance IDs - Microsoft Azure Edition

Summary

In an effort to normalize the output from the compliance plugins, and provide a consistent identifier for the output, we are releasing a patch to the Microsoft Azure compliance plugin that makes the following improvements:

• ID generation is more consistent between audits.
• All results should have a policy value reported.
• The majority of results should have actual value or error reported. The exception to this is policies that use a "report" check type. 

Potential Impacts:

Any customers that rely on exact content matches of actual values by using third party tools or custom audit files may have failed results following the update. This would include customers that use the known good functionality from tools that provide baseline or gold image auditing.

The “json_transform” path for some action types have been updated to be more specific in the objects being used.  These paths now call out “vaults”, “VMs”, and “WebApps”.  It is requested to update to the latest version of audits after the plugin update is released.

Tenable Plugins

• 79357 - Microsoft Azure Compliance Checks

Target Release Date

June 13, 2022