v2.4.2

CISAzureBenchmark-PS v2.4.2

Benchmark: CIS Microsoft Azure Foundations Benchmark v6.0.0
Coverage: See README for current control coverage

Requirements

• PowerShell 7.0+
• Az PowerShell modules (installed automatically with Install-Module)

Quick Start

Install-Module CISAzureFoundationsBenchmark -Scope CurrentUser
Connect-AzAccount
Invoke-CISAzureAudit -TenantId (Get-AzContext).Tenant.Id

See the README for full documentation.

What's Changed

• Point to AzureDemoEnvironment as an audit target by @vegazbabz in #86
• Document that control ids reference the benchmark PDF remediation page by @vegazbabz in #87
• Source the tool version from the manifest, fix locale-dependent report dates by @vegazbabz in #88
• Add README demo GIF, refresh the sample report and dashboard screenshot by @vegazbabz in #89

Full Changelog: v2.4.1...v2.4.2

v2.4.1

CISAzureBenchmark-PS v2.4.1

Benchmark: CIS Microsoft Azure Foundations Benchmark v6.0.0
Coverage: See README for current control coverage

Requirements

• PowerShell 7.0+
• Az PowerShell modules (installed automatically with Install-Module)

Quick Start

Install-Module CISAzureFoundationsBenchmark -Scope CurrentUser
Connect-AzAccount
Invoke-CISAzureAudit -TenantId (Get-AzContext).Tenant.Id

See the README for full documentation.

What's Changed

• Refresh the sample report and polish the README front section by @vegazbabz in #84
• Make elapsed-time console output locale-independent by @vegazbabz in #85

Full Changelog: v2.4.0...v2.4.1

v2.4.0

CISAzureBenchmark-PS v2.4.0

Benchmark: CIS Microsoft Azure Foundations Benchmark v6.0.0
Coverage: See README for current control coverage

Requirements

• PowerShell 7.0+
• Az PowerShell modules (installed automatically with Install-Module)

Quick Start

Install-Module CISAzureFoundationsBenchmark -Scope CurrentUser
Connect-AzAccount
Invoke-CISAzureAudit -TenantId (Get-AzContext).Tenant.Id

See the README for full documentation.

What's Changed

• Fix locale-dependent score output, guard no-op test filters, raise coverage floor by @vegazbabz in #81
• Add CIS benchmark page references to the control catalog and report by @vegazbabz in #82
• Reject mistyped switches swallowed by the subscription overflow by @vegazbabz in #83

Full Changelog: v2.3.1...v2.4.0

v2.3.1

CISAzureBenchmark-PS v2.3.1

Benchmark: CIS Microsoft Azure Foundations Benchmark v6.0.0
Coverage: See README for current control coverage

Requirements

• PowerShell 7.0+
• Az PowerShell modules (installed automatically with Install-Module)

Quick Start

Install-Module CISAzureFoundationsBenchmark -Scope CurrentUser
Connect-AzAccount
Invoke-CISAzureAudit -TenantId (Get-AzContext).Tenant.Id

See the README for full documentation.

What's Changed

• Add package icon for the PowerShell Gallery listing by @vegazbabz in #80

Full Changelog: v2.3.0...v2.3.1

v2.3.0

CISAzureBenchmark-PS v2.3.0

Benchmark: CIS Microsoft Azure Foundations Benchmark v6.0.0
Coverage: See README for current control coverage

Requirements

• PowerShell 7.0+
• Az PowerShell modules (installed automatically with Install-Module)

Quick Start

Install-Module CISAzureFoundationsBenchmark -Scope CurrentUser
Connect-AzAccount
Invoke-CISAzureAudit -TenantId (Get-AzContext).Tenant.Id

See the README for full documentation.

What's Changed

• Lead installation docs with the PowerShell Gallery by @vegazbabz in #77
• Declare Az modules as RequiredModules so Gallery installs pull them by @vegazbabz in #78
• Expand Gallery tags and declare Core edition compatibility by @vegazbabz in #79

Full Changelog: v2.2.0...v2.3.0

v2.2.0

CISAzureBenchmark-PS v2.2.0

Benchmark: CIS Microsoft Azure Foundations Benchmark v6.0.0
Coverage: See README for current control coverage

Requirements

• PowerShell 7.0+
• Az PowerShell module (Connect-AzAccount before running)

Quick Start

Connect-AzAccount
.\Invoke-CISAzureAudit.ps1

See the README for full documentation.

What's Changed

• Rename module to CISAzureFoundationsBenchmark for Gallery publishing by @vegazbabz in #76

Full Changelog: v2.1.0...v2.2.0

v2.1.0

CISAzureBenchmark-PS v2.1.0

Benchmark: CIS Microsoft Azure Foundations Benchmark v6.0.0
Coverage: See README for current control coverage

Requirements

• PowerShell 7.0+
• Az PowerShell module (Connect-AzAccount before running)

Quick Start

Connect-AzAccount
.\Invoke-CISAzureAudit.ps1

See the README for full documentation.

What's Changed

• Single scoring source and retry for data-plane reads by @vegazbabz in #68
• Control metadata catalog and shared error classification by @vegazbabz in #69
• Extract shared report/summary tail into Complete-AuditRun by @vegazbabz in #70
• Split the test monolith into per-section files by @vegazbabz in #71
• feat: run-to-run diff report (-CompareWith) by @vegazbabz in #72
• docs: scheduled-audit recipe with OIDC federated credentials by @vegazbabz in #73
• feat: coverage gate in CI (-MinCoverage floor + job summary) by @vegazbabz in #74
• release: prepare v2.1.0 by @vegazbabz in #75

Full Changelog: v2.0.0...v2.1.0

v2.0.0 — CIS Azure Foundations Benchmark v6.0.0

CISAzureBenchmark-PS v2.0.0

Benchmark: CIS Microsoft Azure Foundations Benchmark v6.0.0
Coverage: See README for current control coverage

Requirements

• PowerShell 7.0+
• Az PowerShell module (Connect-AzAccount before running)

Quick Start

Connect-AzAccount
.\Invoke-CISAzureAudit.ps1

See the README for full documentation.

What's Changed

• Add .gitattributes and correct README test count by @vegazbabz in #45
• Upgrade to CIS Azure Foundations Benchmark v6.0.0 (127 controls) by @vegazbabz in #46
• Correct README coverage figures and tool version for v6 by @vegazbabz in #47
• Refresh sample report generator to v6.0.0 control set by @vegazbabz in #48
• chore(deps): Bump actions/checkout from 6 to 7 in the actions group by @dependabot[bot] in #49
• fix: count ERROR against compliance score and harden report exports by @vegazbabz in #50
• fix: propagate prefetch and context failures as ERROR results by @vegazbabz in #51
• fix: align check logic with CIS v6 audit procedures by @vegazbabz in #52
• ci: harden workflow permissions and pin dependencies by @vegazbabz in #53
• docs: fix stale v5 references and helper locations by @vegazbabz in #54
• fix: add UTF-8 BOM to scripts with non-ASCII content by @vegazbabz in #55
• ci: validate report inline JavaScript with node --check by @vegazbabz in #56
• fix: untrack suppressions.json — live config stays local by @vegazbabz in #57

Full Changelog: v1.0.0...v2.0.0

v1.0.0 — Initial public release

CISAzureBenchmark-PS v1.0.0

Benchmark: CIS Microsoft Azure Foundations Benchmark v5.0.0
Coverage: See README for current control coverage

Requirements

• PowerShell 7.0+
• Az PowerShell module (Connect-AzAccount before running)

Quick Start

Connect-AzAccount
.\Invoke-CISAzureAudit.ps1

See the README for full documentation.

What's Changed

• chore: add GitHub best practices (CI, templates, security policy) by @vegazbabz in #2
• feat: add sample report, expand README, fix lint issues by @vegazbabz in #5
• fix: add dashboard screenshot to README by @vegazbabz in #6
• chore: remove Sections 3/4 note from README by @vegazbabz in #7
• chore(deps): Bump actions/checkout from 4 to 6 in the actions group by @dependabot[bot] in #3
• fix: align control coverage parity (98 auto + 2 manual) by @vegazbabz in #8
• feat: Add suppressions, JSON/CSV export, timeout enforcement, and -ExitCode by @vegazbabz in #9
• feat: Add config file, adaptive concurrency, and Ctrl+C cleanup by @vegazbabz in #10
• fix: handle isnotnull() returning integer in 8.5 DDoS check, remove test suppression by @vegazbabz in #11
• chore: bump version to 1.3.0 by @vegazbabz in #12
• fix: use completion counter for parallel progress messages by @vegazbabz in #13
• chore: update .gitignore with review and notes patterns by @vegazbabz in #14
• fix: QA pass v1.4.0 — eliminate CLI dependency, fix suppression strict-mode bug, 226 tests by @vegazbabz in #18
• fix: Set-AzContext parameter set conflict in Test-AuditPermissions by @vegazbabz in #20
• fix: exclude certificate-backed keys/secrets from Section 8 KV checks by @vegazbabz in #21
• fix: unwrap ARM .properties in 6.1.1.3 diagnostic settings response by @vegazbabz in #22
• fix: correct control names for 8.3.1 and 8.3.3 by @vegazbabz in #23
• fix: guard .Attributes access under strict mode in 8.3.1/8.3.3/8.3.11 by @vegazbabz in #24
• fix: correct title and harden Attributes guard for 8.3.11 by @vegazbabz in #25
• fix: correct 9.2.1 title everywhere and guard Logging access in Section9 by @vegazbabz in #26
• fix: correct titles for 9.2.2-9.2.6 across all error/info paths by @vegazbabz in #27
• fix: QA review — error-path titles, score formula, release docs, v1.0.0 by @vegazbabz in #28
• docs: update README — v1.0.0, 226 tests, remove Azure CLI refs, fix level/score notes by @vegazbabz in #29
• ux: show worker count at startup and section completion times by @vegazbabz in #30
• fix: QA review findings — S9 blob catch bug, S8 titles, #Requires, dead code by @vegazbabz in #31
• fix: Analyze-Report param, README exit-code text, sample report missing checks by @vegazbabz in #32
• fix: compliance score inconsistency, S9 stale comments and dead code (#33) by @vegazbabz in #33
• fix: sub-summary score denominator and sample history scores (#34) by @vegazbabz in #34
• fix: CSV header quoting, Storage comment, track sample CSV/JSON (#35) by @vegazbabz in #35
• fix: remove Azure CLI references from bug report template by @vegazbabz in #36

New Contributors

• @dependabot[bot] made their first contribution in #3

Full Changelog: https://github.com/vegazbabz/CISAzureBenchmark-PS/commits/v1.0.0